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Abstract. Van Glabbeek's linear time-branching time spectrum is one of the most relevant 

work on comparative study on process semantics, in which semantics are partially ordered by 

their discrimination power. In this paper we bring forward a refinement of this classification 

and show how the process semantics can be dealt with in a uniform way: based on the 

I— ^ , very natural concept of constrained simulation we show how we can classify the spectrum 

C/3 ■ in layers; for the families lying in the same layer we show how to obtain in a generic 

O | way equational, observational, logical and operational characterizations; relations among 

layers are also very natural and differences just stem from the constraint imposed on the 

simulations that rule the layers. Our methodology also shows how to achieve a uniform 

^. , treatment of semantic preorders and equivalences. 
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1. Introduction 

Since the foundational work by Robin Milner [4T1 142| and Tony Hoare ||32l on process 
semantics, there has been a multitude of proposals to endow processes with meaning and 
to define equivalence and preorder relations over them. Among the most relevant work 
are those of Matthew Hennessy |30], who introduced the testing methodology defining 
process semantics from test cases, and those of Jan Bergstra and Jan Willen Klop [11], 
later continued by Jos Baeten and Peter Weijland |10|, which were based on an axiomatic 
approach. 

These proposals define algebraic languages for the specification of processes, diverging 
in subtle details concerning the treatment of non-determinism and parallelism. These 
aspects are captured by means of certain operators which may (strongly) vary in each 
particular language. 
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Focusing on equivalences, it is interesting to note how the pioneering work in this 
area already established two fundamental notions, bisimulation and traces/failures, that 
constitute an upper and a lower bound on the natural framework in which other pro- 
cess equivalences can be studied. Hoare — with his characteristic clarity — summarizes the 
situation in the following paragraph. 

CCS makes many distinctions between processes which would be regarded as iden- 
tical in this book. The reason for this is that CCS is intended to serve as a framework 
for a family of models, each of which may make more identifications than CCS but 
cannot make less. To avoid restricting the range of models, CCS makes only those 
identifications which seem absolutely essential. In the mathematical model of this 
book [CSP] we have pursued exactly the opposite goal — we have made as many 
identifications as possible, preserving only the most essential distinctions. ||32H 

In between these two fundamental notions of equivalence — bisimulation and traces — 
the last two decades of the 20th century witnessed the surge of a large variety of new 
equivalences associated to new calculi and process algebras, whose aim was to explore the 
different needs for expressivity and distinction capabilities in many applications. 

The most important taxonomic work on process semantics was carried out by Rob 
van Glabbeek as part of his doctoral dissertation (54) . In two papers, titled Linear time- 
branching time spectrum |55l [56H , he collected the most important of these equivalences 
establishing, among other results that we will comment on, a classification based on their 
capability to distinguish processes. The first of the papers concentrate on strong semantics, 
in the sense that they consider each action processes perform as being observable by their 
environment. The second paper consider the inclusion in the language of a new and 
invisible action t; process semantics considering this internal action are usually called weak 
semantics. Figure [T] shows a slightly expanded version of the spectrum proposed by van 
Glabbeek for the case of strong semantics in |55|. These strong semantics, that do not 
consider at all the special role of internal actions t, are the only ones that we consider in 
this paper. 

This array of semantics is supported by many authors who claim that there is no single 
"good" definition. Process theory can be applied in a wide spectrum of contexts and 
situations and the concrete uses will have a decisive influence in the election of what a 
suitable semantics should be. 

The choice of a suitable semantics may depend on the tools an environment has, to 
distinguish between certain processes. It is conceivable that a concurrency theory 
is equipped with different semantics, and has the capacity to express equality on 
different levels. 1 57] 

The possibility to define several and varied semantics can then be considered to be 
an advantage of the theory, since it allows for the necessary flexibility to reflect different 
notions of processes and equivalence and preorder relations over them. 

Nevertheless, this multiplicity has gone hand in hand in the literature with an individ- 
ual study of each of the semantics that somehow makes the whole theory less appealing 
because such a cornucopia can become a handicap both for its study and its practical 
application. For instance, although most of the semantic notions defined for processes 
simultaneously induce both a (pre)order and an equivalence, u the literature has frequently 



A remarkable exception, however, is the bisimulation notion, for which no non-trivial order relation is 
known. 
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Figure 1: Linear time-branching time spectrum. 

overlooked the fact that these two notions are mutually intertwined, as we will show 
later. Likewise, the study of the concrete models has been usually undertaken paying 
little attention to the other semantics or to the relations among them, even though it is 
well-known that there exist "families" of semantics — such as the linear semantics — which 
are undoubtedly related. 

A unified study of semantics has both methodological and practical implications that 
have been explored along the last years by the authors of this work, for example in 1 2211241 
25 . 20 . 21 J, and also in work by important researchers in the area [5 , 4, T6ll40| . This research 
shows that a unified view of process semantics is indeed possible. 

This is precisely the main goal we set to reach with our work: we aim to study process 
semantics in a generic way, making the equivalence and (pre)order relations our object of 
study in order to find patterns, to identify families, to search for properties among these 
relations, so that we obtain generic results that need not be proved again and again for 
each of the semantics. 

We aim, in a nutshell, at a unifying view of process semantics that can be used to 
understand them both jointly and individually and that allows to continue with their 
theoretical study in a more focused manner, helping to identify those properties a semantics 
should have for a particular application. 

1.1. Overview of results. This paper contains a consolidated and extended presentation 
of the unification of observational, equational and the logic process semantics published 
in [203IHH471 for strong behavioral semanticsQ We take advantage of the joint and larger 
presentation of the subject to tighten the connections between the different views. Besides, 
we make the paper mostly self-contained providing proofs for all the results; we also 



We comment in Section[T0]the work of some of the authors on unification of weak semantics. 
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complete the study with new results not included in |20Hl9ll47| . We have also completed 
the revision of the unification of strong process semantics with a section devoted to the 
unified presentation of the operational semantics. 

Next we describe the main results we have obtained. They can be used as a roadmap 
for reading the paper and to understand the technical details in the following sections. 

• One of the most generic results we have proved is the existence of two essential 
families of semantics: branching semantics and linear semantics. Certainly, this 
was already hinted by van Glabbeek when he named its spectrum of semantics 
"linear time-branching time". 

Our results show that the most representative branching semantics have char- 
acterizations as simulation semantics. Moreover, every simulation has a natural 
family of coarser linear semantics associated to it that inherit some of its properties. 

In Figure[rT1(pagel34ll , branching semantics are located to the left and each of them 
defines a layer of "induced" linear semantics, to their right. For example, ready 
simulation is the branching semantics from which the classic diamond of linear 
semantics composed of failures, readiness, failure trace, and ready trace semantics 
is generated. These semantics, as we will later see in detail, inherit some of their 
axiomatic characterizations directly from the ready simulation. In addition, the 
same layer also contains the possible worlds semantics, which is a deterministic 
branching semantics. 

Even though the axiomatic characterizations contained in Section|3]already show 
this dependency between linear and branching semantics — see Figurel5l(page[l8)> — 
it is in Section|4]where, using techniques from denotational semantics, the relations 
between the original branching semantics and the induced linear semantics can be 
fully appreciated. The relationships among the different linear semantics in the 
same branching layer are also completely specified in that section. 

• Equational characterizations reveal in a very concise manner the basic properties 
of the different semantics. As a result of our research, we have been able to de- 
rive a generic axiomatic characterization of the semantics in the spectrum which 
shows clearly the relationships among them: the uniformity in the definitions of the 
branching semantics and the different families of linear semantics becomes appar- 
ent, as well as the tight relation between each branching semantics and its associated 
linear semantics. In Section [3] we present all the details related to these axiomatic 
characterizations . 

• Another result that we consider important is that it is indeed possible to establish a 
clear relationship between the preorder and the equivalence associated to a given 
semantics. From an axiomatic point of view, in Section [3] we show how these 
characterizations are closely related. In fact, there are algorithms that allow to 
easily obtain the axioms for the equivalence from those of the preorder (H |2T] |, 
and also the other way around, the axioms for the preorder from those of the 
equivalence (23ll24| . 

• We also offer a unifying view of the process semantics based on observational (de- 
notational) semantics, according to which we have classified the process semantics 
in four categories: 

- bisimulation semantics, which is the finest semantics in the spectrum and the 
only one that cannot be defined by means of a non-trivial preorder; 
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- the simulation semantics (simulation, complete simulation, ready simulation, 
nested simulation, . . . ) which are characterized by means of branching obser- 
vations, that is, labeled trees; 

- the linear semantics (traces, failures, readiness, . . . ), characterized by linear 
observations, a degenerated case of branching observations; 

- the deterministic branching semantics corresponding to an intermediate class 
between branching and linear, where observations are deterministic trees. Pos- 
sible worlds semantics is the only semantics in the original van Glabbeek's 
spectrum in this class. 

Besides their linear or branching nature, semantics are characterized by a local 
observation function that generates the local observations at the states. For the linear 
case there is also the possibility of observing this local information in a partial way 
and this is how for each local observer, in principle, up to four different semantics 
can be obtained. In particular, this gives rise to the classic diamond below the ready 
simulation semantics formed by failures, failure trace, readiness, and ready trace 
semantics. 

The uniform presentation of the process semantics that we offer in Section 0] 
clarifies the relationships and hierarchies among all the semantics; moreover, it will 
make possible the development of generic proofs of their common properties. 
We also present a unified view of the logical semantics. Again, the bisimulation 
semantics, which is characterized by the Hennessy-Milner logic HML [31], is our 
starting point, and then we aim for the sublogics that characterize each of the 
semantics in the spectrum. Guided by our main unification goal, we have not tried 
to obtain the smallest possible sets of formulas, but have veered for the largest 
sublogics that characterize each of the semantics. 

Hence, the finest semantics are characterized by the largest sublogics and in 
fact we obtained a uniform characterization that informs us about the hierarchy 
of semantics, by proving that a semantics Si is finer than another S2 if and only 
if the corresponding logics satisfy Xs 2 £ -£s r Moreover, the classification into 
branching and linear time semantics is also reflected in the structural definition of 
each logic. In particular, the branching semantics are characterized by the free use 
of negation over the formulas that define the corresponding constraint, while the 
linear semantics at each layer of the spectrum introduce ever more limitations in 
the subformulas. 

Finally, we also discuss an operational-like presentation of the semantics in the 
spectrum; more precisely, we consider an evaluation semantics to derive the ap- 
propriate data which characterize them. Those data are quite similar to the ones 
employed for our observational semantics so that it is not them, but the way in 
which they are derived, that enhances our understanding of the features of each of 
the semantics and the relationships between them. These presentations somehow 
generalize the work by Cleaveland and Hennessy [17] on the characterization of the 
Testing semantics by means of bisimulation. There is also a clear connection with 
the work by two of the authors of this paper on (Bi)simulation up-to [25 J. 
A concomitant, but still important result of our work, is of methodological nature: 
the semantics are amenable to a working methodology that allows for general 
results that can be applied to families of semantics as well as to yet to be defined 
semantics. The requirements we impose on these new semantics are relatively mild. 
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An example of this is shown seen in Section|8l where some new process semantics — 
indeed two new families — smoothly integrate into our general theory. In fact, it 
was nice to discover that one of them is just the revivals semantics, which has been 
recently developed by Bill Roscoe |48). 
• Each of the characterization frameworks — equational, observational, logical or 
operational — sheds light on the spectrum in different and complementary ways. 
This has provided us with different ways to study all the previously known seman- 
tics and the relationships between them. That complementary nature also sprang up 
along our unification work when we discovered one by one all the factors that con- 
tribute to the structure of the extended spectrum. In particular, when considering 
simple and natural combinations of axioms we found out the new meet semantics 
in Section[8j while their dual join semantics was discovered in a natural way when 
considering the observational characterizations. Finally, the semantics of minimal 
readies (in Section l6.2.2|) appeared when investigating the logical framework. While 
not too important on its own, our unification work has also revealed a mistake in the 
classic logical characterization of one of the semantics in the original spectrum (see 
Section l6.2.3|) : it was the general and systematic approach that guides our uniform 
characterization that allowed it. 

1.2. Some related work. Naturally, the goal of defining a global or general theory of 
process semantics has been around for a long time and several relevant authors in the field 
have already paved the way that we now tread. 

Despite the methodological differences between Milner 's work, based on bisimulation, 
and Hoare's, on denotational semantics, both of them had in common the search for 
characterizations — logical, axiomatic, observational — that could shed light from different 
angles on the world of process semantics. 

Hennessy introduced the testing methodology to endow processes with semantics, 
making the notion of equivalence to spring from the application of the interaction principles 
for processes expressed within the model. Perhaps one of the most important contributions 
of his work was what he called the "trinity": processes can be seen as syntactic terms in 
an algebra, as operational descriptions in labeled transition systems, or as denotational 
objects in a mathematical model. With our work we have somehow extended this trinity 
in a generic manner to all the semantics in the extended spectrum. 

Van Glabbeek's work, the linear time-branching time spectrum aimed at the comparison of 
most known semantics — at the time he developed his seminal work — by presenting them 
within common frameworks that would allow a comparative study of their properties. 
Besides providing uniform definitions over transition systems, van Glabbeek also proposed 
to characterize the semantics in terms of logical formulas. The set of modal formulas whose 
satisfaction equivalence identifies the same processes as the corresponding semantics is 
defined. Because of the compositional definition of the corresponding sets of formulas, 
this characterization can be considered to be denotational semantics. 

Another characterization provided by van Glabbeek is the axiomatic one, for which he 
defines the BCCSP language that is used in this work (see Definition 12. 1|) . Twelve of the 
semantics in the spectrum are characterized by means of sets of axioms over syntactic terms 
for this language. For most of them — except for bisimulation, that has no associated order — 
their characterizations are actually twofold: on the one hand, the natural order relation 
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that defines each semantics — Tabled] — and, on the other hand, the induced equivalence — 
Table 121 Many of these characterizations were previously known but, again, their uniform 
presentation is one of its main merits. 

A deep study — individual as well as comparative — of these axiomatizations and the 
quest for answers to the new questions that arise from this study has been one of the 
leading forces behind our research. Actually, some of our most relevant results can be 
combined into a new way of presenting the spectrum — Figure [TT] (page IMt — that allows 
for a better comprehension of the semantics since it clarifies their relative positions within 
it and shows the existence of "gaps" that correspond to new semantics whose addition 
to the graph reflects a desirable regularity that makes it clearer. Hoare's work on the 
unification of the study of process algebras [33J was also an important influence. Specially, 
the relationship between similarity and trace refinement, which we have generalized by 
establishing the connection between branching time and linear time semantics, and the 
connection between the denotational, the algebraic, and the operational styles proposed 
by him and He Jifeng in [ 34fl . 

As already mentioned, Roscoe has contributed in an independent research effort in 
parallel with ours to the study of new process semantics by proposing his stable revivals 
model [48 J. He relates his new semantics with other well known linear time semantics and 
the rediscovery of that semantics in our expanded spectrum gave us the opportunity to 
present those relationships with a unified and generic light. 

There is other relevant work in the area of process theory that has inspired us. The 
number of contributions is too large to cite all of them here. Anyone interested on finding a 
more exhaustive list of relevant references may collect them, for instance, from |28~l l7HTll57l 
l50l . There the historic evolution of the area and many of the most important contributions 
to it are reviewed. To them we can add four recent books on process algebras and related 
subjects |8, 49j|6H5ll, presenting different points of view and some of the semantics studied 
in this paper. Finally, in our Conclusions, we will discuss a bit the work on the generic 
study and classification of the weak semantics. 

1.3. Paper structure. We have structured this paper as follows. Section |2] introduces all 
the basic definitions and notation to properly follow the developments in the following 
sections. 

In Section [3] we propose alternative characterizations for the axiomatizations of the 
semantics in the spectrum, both for orders and equivalences. All these axiomatizations are 
based on just two parametrical axiom skeletons that clearly highlight the relations among 
the different semantics. 

Section|4]presents a unified observational characterization for process semantics. One 
of the key ideas is that constrained simulations are uniformly characterized by a branching 
observation plus a local observation function. From the observations of a given constrained 
simulation, the linear semantics in its layer are uniformly derived. 

In Section [5] we prove that the equations we presented in Section [3] are deduced from 
the observations defined in Section H] in a general way, without using at all the already 
known axiomatizations for the semantics. 

Section [6] follows the trails of Sections [3] and 0] by introducing a unified logical charac- 
terization of process semantics. 

In Section we prove that the observational characterizations developed in Section [4] 
allow for generic proofs for the logical characterizations presented in Section [6l Therefore 



UNIFYING THE LTBT SPECTRUM 



the "trinity" of equations, observations, and logical formulas is established in a generic 
way for large families of process semantics. 

Section [8] is a practical proof of the applicability of our unification proposal. Some 
new process semantics, that were not listed in the original linear time-branching time 
spectrum, are easily accommodated in our framework thus getting the corresponding 
semantic characterizations that we have presented in previous sections. 

In Section [9] we conclude the unified presentation of the semantics in the spectrum 
by developing an operational characterization which mainly produces the information 
provided by the observational semantics, but inferred in an operational way, using a 
(unified) set of SOS-like rules. 

Finally, in Section [10] we offer some conclusions and lines for future work. 

Acknowledgments. We gratefully acknowledge three anonymous referees for their very 
thoughtful and detailed comments on a previous version of this work, that have greatly 
helped us to improve the presentation of this material. 

2. Preliminaries 

Although the main results in this paper are also valid for infinite processes — as we showed 
in [22l |25| — in order to simplify the presentation of the concepts, we will mainly consider 
finite processes generated by the basic process algebra BCCSP which contains only the 
basic process algebraic operators from CCS |42|. and CSP |32], but is sufficiently powerful 
to express all finite synchronization trees [41 J. This language has repeatedly been used in 
unification work, e.g. [4. 58j. 

Definition 2.1. Given a set of actions Act, the set BCCSP(Act) of processes is defined by the 
following BNF-grammar: 

p ::= | ap \ p + q 
where a £ Act; represents the process that performs no action; for every action in Act, 
there is a prefix operator; and + is a choice operator. 

The operational semantics for BCCSP terms is defined in Figure |2l As usual, we 

write p — > if there exists a process q such that p — > q, and p => q if a = a\ . . . a n and 

p — > p' — > . . . — ^» q. The initial offer of a process is the set l(p) = {a \ a e Act and p — >}. 
This is a simple, but quite important observation function that plays a central role in the 
definition of the most popular semantics in the linear time-branching time (ltbt) spectrum. 
We will also denote by I the relation expressing the fact that two processes have the same 
initial offers: plq <=> I(p) - I(q). 

One way to capture semantics is by means of the equivalence relation induced by 
it: given a formal semantics Hz, we say that processes p and q are equivalent iff they 
have the same semantics, that is, p =z q <=> Iplz = Q/jIz- These semantics can be defined 
by means of adequate observational scenarios, or by logical characterizations that induce 
natural preorders Ez whose kernels are the semantic equivalences. We refer to |58J for the 
original definition and usual notation for all the semantics in the ltbt spectrum that will be 
discussed throughout the paper. 

To properly express equations or inequations within the process language, we intro- 
duce variables from any adequate set V, and consider the extended set BCCCSP(Ac£, V) of 
terms including variables in V. 
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ap > p 



a , a , 

p^p g^zLl 

p + q^p' p + q^q' 



Figure 2: Operational semantics for BCCSP terms. 

(B\) x + y =* y + x (B3) x + x =* x 

(B 2 ) (x + y) + z =* x + (y + z) (B 4 ) x + =* x 

Figure 3: The axiomatization for the (strong) bisimulation equivalence. 

Some of the semantics in the spectrum are concrete examples of the general notion of 
constrained simulation semantics that can be defined in a parameterized way. 

Definition 2.2. Given a relation N over BCCSP processes, a relation Sjv is an N -constrained 
simulation if pSj^q implies: 

• for every a e Act, if p — > p' then there exists some q' such that q — > q' and p'S^q' , 
and 

• pNq. 

We say that process p is N-simulated by process q, or that q N-simulates p, written p Ens q, 
whenever there exists an N-constrained simulation Sjv such that pSfqq. 

We have already studied the constrained simulation semantics in detail in [24], stressing 
their general properties. In particular, the following constraints were considered: 

• the universal relation U relating all processes, which gives rise to the simulation 
semantics; 

• the relation C, which holds for processes p and q when both, or none, are isomorphic 
to 0, and that gives rise to the complete simulation semantics; 

• the relation I relating processes with the same initial offer, which is the constraint 
for ready simulation; 

• the relation T, that holds for processes having the same set of traces and gives rise 
to the trace simulation semantics; 

• the relation S, the inverse of the simulation equivalence relation, whose associated 
constrained simulation is the 2-nested simulation. 

Throughout this paper there appear different order relations. We use E to denote 
semantic preorders and, for the sake of simplicity, we use the symbol 3 to represent the 
preorder relation C . With = we denote the induced equivalence (that is, E n 3). To refer 
to a specific preorder we shall append the initials of its name as subscripts to the symbol E 
(C RS for ready simulation, Ep for failures, and so on). A similar convention applies to the 
kernels of the preorders (=rs, =f, • • ■ ) and to the bisimulation equivalence =5. 

An inequation (respectively, an equation) over the language BCCSP is a formula of the 
form t < u (respectively, t =* u), where t,u e BCCSP(Acf, V). An (in)equational axiom system 
is a set of (in)equations over the language BCCSP. An equation t =* u is derivable from an 
equational axiom system E, written E I- t — U, if it can be proven from the axioms in E 
using the rules of equational logic (viz. reflexivity, symmetry, transitivity, substitution and 
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closure under BCCSP contexts): 

t - u t — tl u - v t ^ u t ^ u t-u f ^ u' 



t^ t 



^ t t =* v o{t) ^ o(u) at =* au t + t'^u + W 

where substitutions a are defined and applied as usual. 

For the derivation of an inequation t < u from an inequational axiom system E, the 
rule for symmetry — that is, the second rule above — is omitted. We write E \- t < u if the 
inequation t < u can be derived from E. 

It is well-known that, without loss of generality, one may assume that substitutions 
happen first in (in)equational proofs, i.e., that the fourth rule may only be used when its 
premise is one of the (in)equations in E. Moreover, by postulating that for each equation 
in E its symmetric counterpart is also present in E, one may assume that applications of 
symmetry happen first in equational proofs, i.e., that the second rule is never used. In the 
remainder of this paper, we shall always tacitly assume that equational axiom systems are 
closed with respect to symmetry. Note that, with this assumption, there is no difference 
between the rules of inference of equational and inequational logic. In what follows, we 
shall consider an equation t ^ u as a shorthand for the pair of inequations t < u and u < t. 

An inequation t < uis sound with respect to a given preorder relation E, if t E u holds 
true. An (in)equational axiom system E is sound with respect to E if so is each (in)equation 
in E. An (in)equational axiomatization is called ground-complete if it can prove all the 
valid (in)equivalences relating terms with no occurrences of variables. As in [58J, we 
abbreviate ground-completeness for completeness because this is the only kind we use 
along the paper. 

Bisimilarity, the strongest of the semantics in the spectrum, can be axiomatized by 
means of the four simple axioms in Figure HI These axioms state that the choice operator is 
commutative, associative and idempotent, having the empty process as identity element. 
These axioms also justify the use of the notation Y, a L; a P' a ror processes, where the commu- 
tativity and associativity of the choice operator is used to group together the summands 
whose initial action is a. We will also write p\ a for the (sub)process we get by projecting all 
the fl-summands of p; that is, if /? = L fl L/ a V\' then p\ a - Li a P' a - 

Besides the semantics in the spectrum, we are interested in a general study that can 
be applied to any "reasonable" semantics coarser than bisimilarity. Since we will use 
preorders to characterize these semantics we introduce the following definitions that state 
the desired properties of those reasonable preorders. 

Definition 2.3. A preorder relation E over processes is a behavior preorder if 

• it is weaker than bisimilarity, i.e., p =g q => p E q, and 

• it is a precongruence with respect to the prefix and choice operators, i.e., if p E q 
then ap E aq and p + r E q + r. 

If E is actually an equivalence, it is said to be a behavior equivalence. 

Another way of presenting a semantics is by means of a logical characterization. The 
Hennessy-Milner logic f3l) , characterizing the bisimulation semantics is the most popular 
one. 

Definition 2.4 (Hennessy-Milner logic, HML). The set -Chm of Hennessy-Milner logical 
formulas is defined by: if <p, cpi € Xhm for all i € I and a e Act, then /\ ieI cpi, acp, -*(p e Xhm- 
The satisfaction relation |= is defined by: 
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• p |= a<p if there exists q such that p — > q and q \= <p; 

• V N Aiei <P< if for all* e 7 : p |= <p,. 

• p |= -up if p ^ <p. 

Note that A;e0 <P/ € -ChM/ an d we have p |= A;e0 <Pz f° r ai l P- Therefore, in the following 
we will consider that T € Hum, where T is syntactic sugar for Aje0 <P<- The finite version 
of this logic, -C HM , uses binary conjunction A instead of the general conjunction /\ jeI . It 

is well-known that -C HM characterizes the bisimulation semantics between image-finite 
processes, that are those that do not allow infinite branching for any action a e Act at any 
state. Van Glabbeek uses Xb to refer to Xhm hi 



3. Equational semantics 

On Tables[TJand|2]appear the axiomatic characterizations for the preorders and equivalences 
in van Glabbeek's spectrum [58J. For each column, the set of axioms marked with "+" are 
sound and complete with respect to the preorder or equivalence in the head of that column; 
axioms marked with "v" are valid but not needed. When studying these tables there are 
several questions that naturally arise: for every semantics, is there any connection between 
the axioms defining the preorder and those for the equivalence? Can the axiomatizations 
of some of these semantics be jointly tackled? 

In this section we will develop new axiomatizations for all the semantics in the ltbt 
spectrum that offer a clear answer to the previous questions: even if there was not a 
systematic procedure that led to produce the axiomatizations of those tables, we can obtain 
equivalent axiomatizations that do follow a given procedure. 

These new axiomatizations are obtained after noticing that every process semantics 
can be understood as the product of two "design decisions", decisions that define what 
we have called the "dynamic" and the "static" basis of the semantics. We will show that, 
besides B1-B4, we only need a generic simulation axiom (NS) — Proposition I3.U — which 
characterizes the family of constrained simulation semantics, to axiomatize the whole class 
of pure branching semantics. Moreover, to characterize the linear time semantics, we only 
need to add to the corresponding simulation axiom the adequate instantiation of a generic 
axiom (ND) — see page[TJ] — for reducing the observability of non-determinism in processes, 
by means of which we introduce the additional identifications induced by each of the linear 
semantics. 

Also the axiomatizations between orders and equivalences are closely related; in fact, 
in the case of the linear semantics we could just use an equivalence (ND=) axiom, leaving 
the order or equivalence aspect to be determined by the use of the order or equivalence 
axiom of the corresponding branching semantics, see Figure |5] 

In order to justify the form of our axiomatizations without leaving the axiomatic 
framework, in this section we prove our results with separate and ad-hoc proofs for each 
semantics just comparing the new characterizations with those previously known. This 
allows us to quickly get the taste of the underlying relations of the process semantics. Once 
the unified observational characterization of semantics is presented in Section SJ we will 
provide generic proofs for these results in Section [5] that show the suitability of the new 
axiomatizations with respect to the observational characterizations of the semantics. 
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Table 1: Axiomatization for the preorders in the linear time-branching time spectrum. 

3.1. A new axiomatization of the most popular semantics. We start our study with a 
very representative and well-known group of semantics in the spectrum, each of which 
has been developed and used in important work in the area: ready simulation [38. 13 \, 
failures [14, 32|, readiness [43], ready trace [9| and failure traces [44J. 



3.1.1. Semantic preorders. As already hinted above, the dynamic part of the semantics is 
inherited from a simulation preorder. As stated in our Introduction, bisimilarity can be ax- 
iomatized by the set of axioms B\ - £>4. All the other semantics in the spectrum are coarser 
than it, and therefore also satisfy these axioms. But due to the fact that bisimulations define 
equivalence relations and not just preorders, we cannot base on them the characteriza- 
tion of any other interesting semantics. But, plain simulations are somehow defined as 
half-bisimulations, and can indeed be used as support for the characterizations of some 
interesting semantics, such as trace semantics. Nevertheless, plain similarity becomes too 
weak, and some other finer class of simulations is needed to support the characterization 
of the interesting semantics listed above. Next we recall the axiomatizations of plain, ready 
and general constrained similarity. 

Proposition 3.1 ( 15511251 ). 

(1) Plain similarity can be axiomatically defined by means of the axiom (S) x < x + y, together 
with the axioms B1-B4 that define bisimilarity. 

(2) Ready similarity can be axiomatically defined by means of the conditional axiom (RS) xly => 
x < x + y, together with B1-B4. It can also be axiomatized by means of the axiom scheme 
ax <ax + fly, where a represents any arbitrary action. 

(3) Whenever N is a behavior preorder, ^-similarity can be axiomatically defined by means of 
the conditional axiom (NS) N(x, y) => x < x + y, together with B1-B4. 

Let us now consider the diamond of semantics coarser than ready similarity in the ltbt 
spectrum. It consists of the failures, readiness, failure trace, and ready trace semantics. 
None of them is a simulation semantics, so their classic axiomatizations (see Table [T]) 
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contain an additional axiom: 

Failures: (F) a(x + y) < ax + a(y + w) 

Readiness: (R) a(bx + by + u) < a(bx + u) + a(by + v) 

failure trace: (FT) a(x + y) < ax + ay 

ready trace: (RF) I(x) - I(y) => ax + ay =* a(x + y) 

Since we are interested in capturing the reduction of observability of non-determinism, 
our first candidate for a general axiom covering all cases was (FT), which captures the fact 
that by delaying the choices we get "smaller" processes. However, since this axiom char- 
acterizes the failure trace semantics and this is finer than failure semantics, a more general 
axiom is needed: axiom (F) became our next proposal because failure semantics is the 
coarsest of the four semantics. More precisely, we expected to achieve the axiomatiza- 
tion of the four semantics in the diamond by adding the adequate instance of the generic 
constrained conditional axiom 

(ND) M(x, y, w) => a(x + y) < ax + a(y + w) . 

This seemed reasonable since the other semantics in the group are finer than failures and 
by adding a constraint to (F) we certainly obtain a more restricted axiom that produces a 
finer preorder. The conjecture turned out to be correct and we found that the semantics in 
the diamond can be characterized by the following instances: 

(ND F ) M F (x,y,w) <=> true 

(ND R ) M R (x, y, w) <=> I(x) 2 I(y) 

(ND FT ) M FT (x,y,w) ^^ I(w)Ql(y) 

(ND RT ) M RT (x, y, w) ^^ I(x) = I(y) and l(w) C I(y) 

Since Mf is the universal relation containing all triples of processes, the corresponding 
instance of the conditional axiom (ND) is clearly equivalent to (F), and thus adding it to 
the set {B1-B4, (RS)} we obtain a ground-complete axiomatization of Ef- Let us now prove 
that the remaining three semantics are also axiomatized by the corresponding instances of 
the axiom (ND) together with (RS). 

Proposition 3.2. 

(1) The readiness preorder c R is axiomatized by {B1-B4, (RS), (ND R )}. 

(2) The failure trace preorder E Fr is axiomatized by {B1-B4, (RS), (ND FT )}. 

(3) The ready trace preorder is axiomatized by the set {B1-B4, (RS), (ND RT )}. 

Proof. 

(1) Let us show that the set {B 1 -B 4: ,(RS),(ND R )} is logically equivalent to {B1-B4, 
(RS),(R)}. By taking x - bx' + u, y - by', and w - v we have that (ND R ) im- 
plies (R). In the other direction, let x and y be arbitrary closed BCCSP terms with 
I(y) C I(x): we will prove, by structural induction on y, that {B1-B4, (RS), (R)} \- 
a(x + y) <ax + a(y + w), for any term w. 

• For y = 0, we have a(x + y) =* ax < ax + a(y + w), by application of (RS). 

• For y -by' + y", it must be x - bx' + x" and taking v - y" + w in (R) we obtain 
a(x + y) - a(bx' + by' + x" + y") < a(x + y") + a(y + w). Then we have I(y") c I(x) 
and we can apply the induction hypothesis to get {B1-B4, (RS), (R)} \- a(x + y) < 
ax + a(y + w). 
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\ 

I(x) = l(y) => x < x + y 
l(x) = l(y) and l(w ) c I(y) => a(x + y) < ax + a(y + id) 



EfT Er 

K*) = %) => x < x + y I(x) = I(y) ^x<x + y 

I(w) Q l{y) => a(x + y) < ax + a(y + w) l{x) 2 l(y) => a(x + y) < ax + a(y + w) 



E F 

I(x) = I(y) ^>x<x + y 
a(x + y) < ax + a(y + w) 



Figure 4: Inclusion relation for the ready simulation preorder and its associated linear 
semantics. 

(2) Let us show that the sets {B1-B4, (RS), (ND FT )} and {Bi-B 4/ (RS), (FT)} are logically 
equivalent. The implication from left to right follows by taking 10 - 0. In the 
other direction, let w and y with I(iu) c J(y), so that a(x + y) < ax + ay using (FT) 
and, since I(y) — I(y + w), we have y < y + w using (RS): hence we conclude, 
a(x + y) <ax + a(y + w). 

(3) Let us show that the set {Bi-B 4/ (RS), (ND RT )} is logically equivalent to {B1-B4, (RS), 
(RT)}. We first note that {B 1 -B i ,(RS),(RT)} is equivalent to {B 1 -B i ,(RS),(RT il )}, 
where (RT>) is the axiom Mrt(x, y, w) => ax + ay > a(x + y). This follows from the 
fact that, whenever I(x) - I(y), we can use (RS) to get x < x + y and y < x + y, and 
then ax + ay < a(x + y). Now, the implication from left to right follows by taking 
w — 0. From right to left, as above, whenever l(w) C l(y) we have y < y + w and 
then, if I(x) = I(y) we have a(x + y) < ax + ay, and therefore a(x + y) <ax + a(y + z). 

□ 

Figure |4] shows the already known relations between the semantics of the spectrum 
in the ready simulation layer. However, we want to stress the fact that once the new 
axiomatizations are proved to be correct, those relations became obvious since the four 
constraints defined above trivially satisfy Mrt(x, y, w) => M?t(x, y, w) A Mr(x, y, w) and 
Mft(x, y, w) V Mr(x, y, w) => Mf(x, y, w). It is even more important that the tight relations 
and the subtle differences between these semantics clearly stand out by just looking at their 
axiomatizations. 

Certainly, if we compare our new axiomatizations and those in Table [H the use of 
conditions in our axioms could be on the grounds that complex conditions could be used 
to hide the complexity of the semantics. However, the conditions that we have introduced 
for the alternative axiomatizations of the semantics in the spectrum are very simple. In any 
case, our main interest was to obtain a uniform presentation of the axiomatizations that 
could be used to simplify their generic algebraic study. 

Corollary 3.3. 
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Table 2: Axiomatization for the equivalences in the linear time-branching time spectrum. 

(1) n FT is axiomatized by the set {Bi-£>4, (RS), (NDq )}, where (NDq ) is the instance of 
(ND FT ) where w is 0. 

(2) E RT is axiomatized by {Bi-B 4/ (RS), (ND* T )}, where (ND* T ) is the instance of (ND RT ) 
where w is 0. 

Proof. Note that for the proof of Proposition 13.21 only the case w — is needed. □ 

Even if the simplifications above are possible, we prefer to maintain the general forms 
of the axioms (ND FT ) and (ND RT ) to keep all axiomatizations as similar as possible, which 
will come in handy when proving general properties of the semantics. 

Corollary 3.4. 

(1) Ef can be axiomatized by the axioms {B1-B4, (ND F )}. 

(2) Er can be axiomatized by the axioms {B1-B4, (ND R )}. 

Proof Note that (ND F ) implies (RS) and therefore (ND R ) implies (RS), by taking y = and 

w-y. □ 



3.1.2. Equivalences and their ^reorders. Let us now study the equivalences and first of all 
note that the axiom (ND) controlling the reduction of non-determinism has been presented 
as an inequational axiom. Certainly, it cannot simply be replaced by the corresponding 
equation since, in general, it is not true that ax+ay =* a(x + y). However, the two dimensions 
corresponding to (RS) and (ND Z ) that control the "growth" of a process with respect to a 
preorder < are not orthogonal; for example, a(x + y) < a(x + y) + ax can be derived either by 
an application of (ND ) or by one of (RS). As a consequence of the relation between these 
two axioms, once (RS) is assumed then the inequational axiom (ND) can be substituted by 
its (stronger) equational form 

(ND=) M(x, y, w) => ax + a(y + w) + a(x + y) =* ax + a(y + w) . 

As above, we write (ND=) for the concrete instances of this axiom for Z £ {F, R, FT, RT}. 



UNIFYING THE LTBT SPECTRUM 17 



Proposition 3.5. 

(1) The set {B1-B4, (RS), (ND)} is logically equivalent to {B1-B4, (RS), (ND+)}, where (ND+) 
is the axiom 

M(x, y, w) => ax + a(y + w) + a(x + y) <ax + a(y + w) . 

(2) [Bi-Bi, {RS), (ND+)} is logically equivalent to {Bi-B 4/ (RS), (ND=)}. 

Proof. 

(1) We only need to prove the implication from right to left, since the other follows from 
< being a precongruence. For that, from (RS) we get a(x + y) < a(x + y) + ax + a(y + w) 
whence, using (ND+), a(x + y) < ax + a(y + w). 

(2) We only need to prove that, if M(x, y, w), then 

[Bi-Bi, (RS), (ND+)} h ax + a(y + w) < ax + a(y + w) + a(x + y) , 

which follows from (RS). 

□ 

This result can be interpreted as saying that the only way to "enlarge" a process is by 
extending its possible behaviors by means of the "dynamic" simulation axioms; the static 
rules, (ND) and its variants, instead generate new identifications among processes. 

Actually, any complete axiomatization of a preorder that contains the axiom (RS) can be 
turned into an equivalent axiomatization by replacing every inequality u<vbyu + v^v. 

Proposition 3.6. Let Q - {B1-B4, (RS)} U Q' be an axiomatization of an order c such that C C I. 
Then, the equational variant of Q, Q = - {B1-B4, (RS)} U {M => u + v ^ v \ M => u < v e Q'} is 
also an axiomatization o/C. 

Proof. Analogous to the particular case considered in Proposition 13.51 above. For the sake 
of clarity we have preferred to present the particular case before, because it is easily stated 
and it corresponds to the most important instance of the general result. □ 

Finally, to conclude this section we gather in Table |2] axiomatic characterizations for 
the semantic equivalences that are an alternative to the classic axioms appearing in |58|. 

Following the same ideas that we have already discussed for the preorders, a key point 
is to find the equations that characterize the simulation equivalence that governs each layer. 
As showed in [24], there is a generic axiom that we can use: 

(NS=) N(x, y) => a(x + y) - a(x + y) + ay. 

We consider the instantiated equation that characterizes the ready simulation equiva- 
lence: 

(RS=) I(x) = I(y) => a(x + y) - a(x + y) + ay, 

and the rest of the characterization follows by using the equation (ND=) presented above. 

Proposition 3.7. 

(1) The failure equivalence =f is axiomatized by {Bi-E^, (RS=), (ND=)}. 

(2) The readiness equivalence =r is axiomatized by {B1-B4, (RS=), (ND=)}. 

(3) The failure trace equivalence =fj is axiomatized by {B1-B4, (RS=), (NDU)}. 

(4) The ready trace equivalence =kt is axiomatized by the set {B1-B4, (RS=), (ND= T )}. 
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Figure 5: Axioms for the ready simulation layer of semantics. 

Proof. To prove these results we can compare the new and old axiomatizations similarly as 
we did in the proof of Froposition |3.5l or alternatively make use of the "ready to preorder " 
algorithm thoroughly studied in H [THUS) • □ 

The results in this section clarify the entanglement between axiomatizations for pre- 
orders and equivalences. For example: for the ready simulation and its associated linear 
semantics, we just need three axioms (RS), (RS=) and (ND=) — conveniently instantiated — 
to characterize the 10 relations (orders and equivalences) involved, as summarized in 
Figure 13 



3.2. The coarsest semantics in the spectrum. The results in Section l3Tl show the relations 
between the ready simulation and the linear semantics naturally associated to it. The same 
phenomenon occurs for other simulations. In this section we focus on the bottom part of 
the spectrum where lie the simulation semantics coarser than ready simulation: plain and 
complete simulation, and the semantics coarser than these. For the simulation semantics we 
obtain the corresponding axiomatizations simply by considering the universal constraint 
for the case of plain simulations and the complete constraint for complete simulations: 

Simulation U{x,y) <=> true 

Complete simulations C(x, y) <=> (x = iff y = 0) 



UNIFYING THE LTBT SPECTRUM 19 



Trace and completed trace semantics can be defined by simply adding our axiom (ND F ) to 
the appropriate instance of 

(NS) N(x, y) => x < x + y. 

Proposition 3.8. 

(1) Er is axiomatized by the axioms^ {B1-B4, (S), (ND F )}. 

(2) c CT is axiomatized by the axioms {B1-B4, (CS), (ND F )}, where (CS) is the instantiation of 
(NS) taking C(x, y) as N(x, y). 

Proof. 

(1) The classic axiomatization of trace semantics is given by {B1-B4, (S), (T)}, where (T) 
is the axiom ax + ay =* a(x + y). Note that {B1-B4, (S), (T)} is logically equivalent to 
{Bi-£>4, (S), (T E )}, where (T E ) is the axiom a(x + y) < ax + ay, because (S) can be used 
to obtain ax < a(x + y) and ay < a(x + y). And it is immediate that (ND F ) implies 
(T E ). Also, {(S), (T E )} h a(x + y) < ax + a(y + w), since a(x + y) < ax + ay by (T E ) and 
ax + ay < ax + a(y + w) by (S). 

(2) Analogous to the previous case once we realize that the classic axiom for completed 
trace, (CT) a(bx + u) + a(cy + v) =* a(bx + cy + w + u), is equivalent to the conditional 
axiom C(x, y) => ax + ay =* fl(x + y). This follows because bx + u and cy + y are 
two independent patterns describing non-null processes and when the condition is 
instantiated with x and y equal to the identity is trivial: flO + flO =* flO. 

D 

By an argument analogous to that in Proposition |3.5[ we can obtain for E T the axiomatization 
{B1-B4, (S), (ND=)}. Note that although (ND=) is an equation, this axiomatization is not the 
classic one; obviously, (T) ax + ay = a(x + y) implies (ND=) but the converse is false. 

It is easy to check that in the case of trace semantics, the particular instance (NDo) of the 
axiom (ND) with w equal to is powerful enough to generate the trace preorder. This was 
certainly not the case when we were under ready simulation, where (NDo) just generates 
the failure trace preorder instead of the coarser failures preorder. 

It is also interesting to note that for the trace semantics the symmetric version of (ND), 

(ND VW ) a(x + y) < a(x + v) + a(y + w), 
is also valid, so we can take both {B1-B4, (S), (ND mv )} and {B1-B4, (S), (ND= W )}, where 
(ND= W ) a(x + v) + a(y + w) + a(x + y) - a(x + v) + a(y + w), 

as alternative axiomatizations of the trace preorder. 

Should we expect another diamond of "reasonable" semantics under plain simulation 
in the spectrum? Were that to be the case, why have we only found the trace semantics? 

In order to answer these questions, note that the diamond of semantics under ready 
simulation was completely governed by the function I, which appears in the constraints of 
the different instantiations of the axiom (ND). For plain simulations, however, the trivially 
true predicate U(x, y) corresponds to the observation function that can see nothing. As a 
consequence, if we substitute U for I in each of the four constraints of the diamond they 
all collapse into a single one: trace semantics. Nevertheless, an alternative path can be 
explored to obtain new semantics: let us keep the different axioms (ND ) the way they 
stand and simply replace (RS) by (S). Then we obtain the following results: 



3 Note that (S) is equivalent to (US), the installation of (NS) with U as N. 
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Proposition 3.9. {Bi-£>4, (S), (ND FT )} is another axiomatization of trace semantics. Hence, under 
(S) the failures and the failure trace axioms generate the same preorder, namely the trace preorder. 

Proof. {Bi-E>4, (S), (NDo)} is a complete axiomatization of trace preorder, and (NDo) is a 
particular case of (ND FT ). □ 

The axioms corresponding to readiness and ready trace, however, give rise to two new 
semantics that we shall name extended ready and extended ready trace semantics. They are 
defined by the order obtained by inclusion of the offers of the processes, either just at the 

end of a trace, or after each action within it: in order to have p Eer q, for each p ==> p with 
I(p) = R we need some a =» q with l(q') 2 R; the extended ready trace preorder Eert is 
defined analogously, but using ready traces. 

Proposition 3.10. 

(1) The set {B1-B4, (S), (ND R )} is an axiomatization o/Eer- 

(2) The set {B1-B4, (S), (ND RT )} is an axiomatization o/Eert- 

Let us now consider the versions of the axioms (ND ), (ND ), (ND ) where the constraint 
I has been replaced by the completeness condition C defined by C(x) <==> x - 0: 

(C-ND R ) M CR (x,y,w) <^=> (C(x) implies C(y)) 

(C-ND FT ) M CF T(x,y,io) ^> (C(y) implies C(w)) 

(C-ND RT ) McR T (x,y,w) ^^ ((C(x) iff C(y)) and (C(y) implies C(w))) 

Once again, we simply obtain three alternative axiomatizations of the completed trace 
semantics. 

Proposition 3.11. The following axiomatizations are equivalent: 

(1) {B!-B 4 ,(CS),(ND F )}. 

(2) {B1-B4, (CS), (C-ND R )}. 

(3) {B1-B4, (CS), (C-ND FT )}. 

(4) {Bi-B 4/ (CS), (C-ND RT )}. 

Proof. Clearly, (1) => (2) => (3) => (4) and therefore it is enough to prove that (4) => (1). If x 
and y are not we can apply (C-ND ) to obtain the inequality in (ND ). If x is but y is 
not, we need to obtain ay < aO + a(y + w). By (CS) we have y < y + w and then ay < a(y + w); 
applying (CS) again, a(y + w) < a(y + w) + aO and thus ay < aO + a(y + w). If y is but x is 
not, we need to obtain ax < ax + aw, which results from an immediate application of (CS). 
Finally, if both x and y are 0, aO < aO + aw. □ 

As before, if we consider the original axioms (ND ), (ND ), and (ND ) we obtain, 
together with an alternative axiomatization of the completed trace semantics, two new 
semantics. 

Proposition 3.12. The set {B1-B4, (CS), (ND FT )} is logically equivalent to {Bi-B 4/ (CS), (ND F )}. 
Hence, under (CS), the failures and the failure trace axioms generate the same semantics. 

Proof. It is enough to prove that (C-ND FT ) can be derived from {B1-B4, (CS), (ND F )}. 

• If y is we then have w equal to and can apply (ND FT ). 

• If y is not we can apply (NDq T ) to obtain a(x + y) < ax + ay and then (CS) to 
conclude that a(x + y) < ax + a(y + w). 

□ 
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By contrast, as happened for plain simulations, under (CS) the axioms of the ready seman- 
tics generate two slightly different versions of the extended ready and extended ready trace 
semantics introduced before, that we call extended complete ready and extended complete ready 

trace semantics. In order to have p Eecr a , whenever p ==> p with l(p') # we require 
some q => q' with l(q') 2 l{p'), but if I(p') = then the corresponding q' also has to satisfy 
I(q') = 0. The extended complete ready trace preorder Eecrt is defined in an analogous 
way, starting from the ready traces of the processes. 

As we did in Section 13.1.21 we can prove that the axioms that characterize trace and 
completed trace preorders reflect the fact that the order relation is inherited from simulation 
and complete simulation, respectively, and that the role of the static rules is to introduce 
identifications. As stated in Proposition 13.121 above, the only inequation that we use 
to axiomatize the trace and completed trace orders is (S), the remaining axioms being 
equational axioms. 

Proposition 3.13. 

(1) {Bi-B 4 , (S), (ND F )} is logically equivalent to [Bi-B^, (S), (NDl)}. 

(2) [Bx-Bi, (CS), (ND F )} is logically equivalent to {B1-B4, (CS), (NDl)}. 

A similar discussion could have been carried out for trace and completed trace equiva- 
lences, and indeed a very natural axiomatization for these relations can be obtained based 
on the corresponding instantiation of the (NS=) equation: 

(S=) a(x + y) - a(x + y) + ay 

(CS=) C(x, y) => a(x + y) - a(x + y) + ay . 

Proposition 3.14. 

(1) The trace equivalence =t is axiomatized by {B1-B4, (S=), (ND=)}. 

(2) The completed trace equivalence =ct is axiomatized by {B1-B4, (CS=), (ND=)}. 

To conclude this section devoted to the unification of the equational characterizations 
of process semantics, we present in Figure [6] a condensed view of our new spectrum. This 
presentation exploits in an expressive way the two dimensions of the picture, which in fact 
reflects a tridimensional structure. On the lefthand side the constrained simulations and 
bisimulations appear, totally ordered from top to bottom. Each constrained simulation 
generates a layer of semantics. Here, we have only detailed the layers corresponding to 
ready simulation and that of plain simulation. As a matter of fact, the latter degenerates 
to a single point due to the simplicity of the constraint U governing plain simulations. 
The naturality of the semantics appearing in this part of the spectrum is illustrated by 
our generic axiomatization, where a single (constrained) simulation axiom governs all 
the constrained simulation semantics, whereas adding a single axiom we complete the 
axiomatizations of each of the linear semantics at the righthand side of the picture. 
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Figure 6: New view of the linear time-branching time spectrum. 



4. Observational semantics 

Along Section [3] we have presented some views of the axiomatizations for process se- 
mantics that highlight the common properties and the subtle differences between them; 
likewise these views of the axiomatic characterizations point out the similarities between 
the preorder and the equivalence of a given semantics. 

In this section we focus on the characterizations of process semantics based on obser- 
vations. Indeed, this idea of determining the semantics by means of observations lies deep 
inside the foundations of process theory. 

Our calculus is founded in two central ideas. The first is observation; [. . .] two sys- 
tems are indistinguishable if we cannot tell them apart without pulling them apart. 
We therefore give a formal definition of observation equivalence and investigate its 
properties. [41 J 

Imagine there is an observer with a notebook who watches the process and writes 
down the name of each event as it occurs. [32 J 
Besides the classical references to Milner and Hoare, this idea of observation per- 
vades the Hennessy's testing methodology |30[ and most of the work on linear semantics. 
Observations, in spite of the variations in different proposals, constitute a denotational 
space closely related to the classical developments of semantics based on denotations for 
programming languages l52ll . 

In this section we will show how most of the semantics can be characterized with one 
of the two main families of observations: 

• Branching general observations, Section |4~T1 that are essentially labeled trees, that 
characterize the simulation semantics: simulation, complete simulation, ready sim- 
ulation, nested simulation, . . . 

• Linear observations, a simplified case of branching observations, Section 14.21 that 
characterize the linear semantics: traces, failures, readiness, ready trace, . . . 

We consider also in Section l43l a more exotic kind of observations, deterministic branch- 
ing observations, which are essentially deterministic trees. Possible worlds semantics is 
the only semantics appearing in the classical spectrum in this class, although, our gen- 
eral approach will show how this kind of observations define new full families of process 
semantics. 

To develop this observational characterization for process semantics allows us to 
deepen into the ultimate nature of the similarities and differences between them. Along 
this section we present a thorough study of the local observation functions that generate 
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the local observations of the states, Figure [10} For the linear case, there is also the possi- 
bility of observing this local information in a partial way and this is how for each local 
observer, in principle, up to four different semantics can be obtained. This fact explains 
the classic diamond below the ready simulation semantics formed by the failures, failure 
trace, readiness, and ready trace semantics. Again, the generality of our study makes it 
exportable to other simulation layers enriching and completing the spectrum of semantics, 
Figure [TT1 

Finally, from a methodological point of view, the unification of observational semantics 
that we present in this section introduces all the technical machinery needed to rewrite the 
proofs of Section [3] in a generic way, proving that the two unification procedures produce 
characterizations of the same semantics. We will address this topic in Section|5] Let us now 
concentrate on the observational semantics. 

4.1. Branching general observations. In order to characterize the simulation semantics in 
an extensional way we need local and branching general observations. 

Definition 4.1. The sets L^ of local observations corresponding to each of the constrained 
simulations in the spectrum, and Ljv(p) of observations associated to a process p, are defined 
as follows: 

• Universal (or Plain) simulation: Ljj = {•}; Lu(p) = ■. 

• Ready simulation: L/ = "P(Act); Lj(p) - I(p). 

• Complete simulation: Lq — Bool; Lc(p) is true if I(p) — and false otherwise. 

• Trace simulation]: Lj - l P{Act*); Lj(p) - T(p), the set of traces of p. 

• 2-nested simulation: L s = {\p\s I V £ BCCSP}; L s (p) - RpJs, where JpJs represents 
the equivalence class of p with respect to the simulation equivalence. 

Definition 4.2. 

(1) A branching general observation (bgo for short) of a process is a finite, non-empty tree 
whose arcs are labeled with actions in Act and whose nodes are labeled with local 
observations from L^, for N a constraint; the corresponding set BGOn is recursively 
defined as: 

• </, 0) eBGO N for/ e L N . 

• (I, {(airbgo^ | i £ l..n}) e- BGOn for every n e IN, fl, 6 Act and bgo ( e BGOjv- 

(2) The set BGOm(p) of branching general observations of p corresponding to the con- 
straint N is 

BGO N (p) = {(L N (p),S) | S c {{a,bgo) \ bgo £ BGO N (p'),p -A p')\ . 

(3) We write p< b N qii BGO N (p) C BGO N (q). 

In Figure [7] some simple examples of bgo's for N = I are shown. We represent bgo x as 

<{«}, {(a, {{b), {{b, <{c}, 0))})), {a, ({b}, {{b, ({d}, 0))}))}) 

and bgo 2 as 

<H{(^<{fe},{(fe,<{c},0»,(fe,<{d},0»}»}>. 



Trace simulations are the only ones in this list that do not appear in |58|. They can be defined as T- 
simulations, with T(x,y) ::= T(x) = T(y), and the general theory about constrained simulations in J24l applies 
to them. In particular, they can be axiomatized as stated in Proposition l3. 1 [ 3) , pageH3l 
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bgo 1 bgo 2 





[b] {b} 

b 

M {d} 

Figure 7: Two branching observations. 

We use braces for the set of children of a node, parentheses to represent a branch of the tree 
as a pair (initial arc, subtree below), and angular brackets to represent each tree as a pair 
(root, children). 

Note that the bgo's of a process p described by its transition system can be generated 
by inductively applying the clauses defining the set BGOm(p), even when p is infinite. For 
instance, if N - I and we consider the process p ::= c.p defining a clock, since C {(c, bgo) \ 
bgo € BGOj(p),p -A p}, it follows that <{c},0> € BGOi{p). But now {(c,({c},0))} C {(c,bgo) \ 

bgo e BGOi(p),p — > p\ and therefore ({c}, {(c, ({c},0))}) e BGOi(p), and so on. 

It is clear that the bgo's of a process have an operational flavor. The nodes of the 
observations correspond to its states and the arcs to its transitions; this is why we will 
be able to define the orders associated to the different simulation semantics simply by set 
inclusion over the sets of bgo's. 

Let us also comment on the fact that in all five cases that we have considered in 
Definition 14. 11 which correspond to the five constrained simulation semantics in the spec- 
trum, the local observation functions L^ define a representation of the equivalence re- 
lation N used to define the constrained simulation relations. This means that we have 
L N (p) = L N (q) <^=^> pNq. 

Example 4.3. For N - I, if x = b(c + d) and y - be + bd, then for p = a(x + y) we have 
bgo k € BGOi(p) f° r k £ (1/2, 3}, where the bgo's are depicted in Figured! It is easy to check 
that all of them are also branching observations of q = a(x + y) + ax. As a matter of fact, we 
have BGOi(p) - BGOj(q). Note that in order to obtain bgo 3 e BGOi(p) we need to combine 

two different observations of the process x + y, which is the only p' such that a(x + y) — > p'. 
In contrast, for p = a(bc + bd) and q = abc + abd, BGOi(q) <2 BGOi(p), since for the 
branching observation bgo l in Figure[7]we have bgo 1 £ BGOi(q) and bgo 1 $. BGOi(p). And 
also, we have BGO\{p) £ BGOj(q), since for bgo 2 as in Figure[7]we have bgo 2 £ BGOi(p), but 
bgo 2 i BGOi(q). The key idea is that we can indeed include in a single bgo two separated 
computations but we cannot "mix" two different ones, even if the labels both in their initial 
transitions and in the local observations of the reached nodes were the same. This is why 
bgo 2 $ BGdiq). 



The following simple properties will be immediate consequences of Theorem |4.9l below; 
we use them here to illustrate the expressive power of each kind of bgo. 
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Figure 8: Three branching observations. 

Definition 4.4. An axiom t < u, respectively t ^ u, is satisfied in a model BGOn if 
BGC>N(t') c BGOn(m')/ respectively BGC>N(t') - BGOn(u'), for every possible ground in- 
stantiation t' < u' or t' — u' of the axiom. 

Proposition 4.5. 

(1) The axiom (S) x < x + y is satisfied in the model BGOu. 

(2) The axiom (S=) a(x + y) - a(x + y) + ax is satisfied in the model BGOu. 

Proof. 

(1) It is an immediate consequence of the fact that if p — > p' then p + q — > p' , and 
therefore {a \ p — >} c {a \ p + q — >}. 

(2) Again, it is a simple exercise to check that BGOu(p) £ BGOu(q) implies BGOu(ap) c 
BGO u (aq), and that if BGOu(p),BGO u (q) Q BGO u (r), then BGO u (p + q) £ BGO u {r); 
in combination with $}, this produces the result. 

□ 

Proposition 4.6. BGOi{p) C BGOi{p + q) iffl(q) C I(p). 

Proof. (<=) Since I(p + q) - I(p), the root of the bgo's is the same for both processes and 
obviously p + q has all the observations of p. 

(=>) If I(q) <£ I(p), then I(p) ^ I(p + q) and then no bgo of p is a bgo of p + q because the 
roots of the observations of both processes are different. □ 

The fact, that we now prove, that the observational semantics BGOn(p) can be defined 
in a compositional way, is an important property that will simplify the proofs of many of 
their properties. 

Theorem 4.7. Let L be a function used as a local observation function and let us also denote by 
L the range ofL, as done in Definition ^. 1\ If there exist semantic functions + L : LxL — > L and 
a L : L — > L satisfying L(ap) - a L L(p) and L(p + q) - L(p) + L L(q), then: 

. BGO N (ap) = {(a L L(p),{(a,bgo) \ bgo eB})\Bc BGO N (p)}. 

• BGO N (p + q) = {(L(p) + L L(q), S 1 U S 2 > I (L(p), S 1 ) € BGO N (p), (L{p), S 2 > € BGO N (q)}. 
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Proof. The first equality is immediate by definition of BGO^iap). As for the second, we 

only need to realize that p + q — > r iff p — > r or q — > r. then, the set of children of the 
root labeled by L^(p + q) at any bgo e BGO^(ap) correspond to the union of the two sets of 

children that contain some bgo's of processes p, such as p — > p, (and then p + q — > p,) or 

<7; such that q — > </; (and then p + ^ — > qi). Note that from the equalities above it follows 
that BGOn(p) can be computed compositionally □ 

In particular, BGO^ip) is compositional for any of the constraints considered in Defi- 
nition gTQ 

Proposition 4.8. For N e {U, I, C, T, S], Ljv can be defined in a compositional way over the terms 
in BCCSP. 

Proof. The result for U is obvious since it is a degenerate semantics that identifies all 
processes. By Theorem 14.71 and Theorem 14.91 below we can conclude that the simulation 
semantics can indeed be denotationally defined. The result for traces is well-known, while 
I and C can be easily defined denotationally since I(ap) = {a} and I(p + q) = l(p) U l(q). □ 

Now we show that bgo's characterize N-simulation semantics in all cases. 

Theorem 4.9. For all N e {U,I,C, T, S} and any two processes p and q, p c NS q iff-p <^ q. 

Proof. (=>) Let p = T,JL a Pa and q - £ £ fl^; if p Ens <?/ then pM? and therefore L^i(p) = 
Lpj(q). Now we proceed by induction on p. If p = the result is trivial. Otherwise, for 

every a e l{p) such that p — » p' there exists <j — > ^' such that p' E;vs *?'■ By induction 
hypothesis BGO^(p') C BGO^iq') from where, by the definition of BGO^(p), it follows that 
BGO N (p) c BGO N ((?). 

(<=) Let us show that the relation R = {(p, q) | BGO^(p) C BGOn(<7)} is an N-simulation. 
If (p,g) e R, then Ljv(p) = LjvOj) because (Lw(p),0) € BGO^(q) and thus pM?. Now, for each 

p — > p' we have {(L^(p), {(a, bgo)}) \ bgo e BGO^(p')} C BGO(<7) and therefore there must 

exist some <? — > q 1 ' such that BGO^(p') C BGO^iq'), so that (p', ^') e R. D 

Note that for this result to hold it is only required that the local observation function 
Ln satisfies pNq iff Lw(p) = Lj^(q). That is, Ln must compute a concrete representative of 
the equivalence class defined by N and this stresses again the interest of using behavior 
equivalences N as constraints for the definition of constrained simulations. Let us recall 
that, in principle, any behavior preorder could be used as such a constraint. For instance, 
the predicate I 3 defined by phq iff I(q) c I(p) could be used to define h -simulations 
(which in fact coincide with /-simulations). But from I(q) c I(p) we cannot conclude that 
Ln(p) - L^iq) and, hence, either a more complicated characterization of E NS in terms of 
bgo's or an additional argument to show that p Q c q implies I(p) c l(q) would be needed. 
And although this is obvious for a constraint as simple as I, or even T or S, it could be 
far from trivial for other, more complex constraints: therefore, it is always advisable to 
consider equivalence behaviors as constraints. 

Corollary 4.10. For any constraint N that is a behavior equivalence, whenever we have as local 
observation function L^ the quotient function Lfq(p) = [[p]]]v or any concrete representation of it 
satisfying L N (p) - L N (q) <=> pNq, then p E NS q iffBGO^ip) c BGO^(q). 

The results above bring forward the fact that despite the resemblance between the 
bgo's of a process and its computation tree, the possibility of mixing several computations 
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in a single branching observation makes it possible to identify non-bisimilar processes by 
their sets of branching observations. 

4.2. Linear observations and linear time semantics. We introduce the linear observations 
of a process as a particular (degenerate) case of branching observations: those with a linear 
structure. 

Definition 4.11. 

(1) The set LGOn of linear general observations (lgo for short) for a local observer L^ is 
the subset of BGOn defined as: 

• (I, 0) e LGO N for each I e L N . 

• (I, {(a, lgo)}), whenever a e A and lgo 6 LGOn- 

(2) The set of linear general observations of a process p with respect to the local observer 
L N is LGO N (p) = BGO N (p) n LGO N . 

Since lgo's are linear they can be presented as traces, avoiding the sets of descendants in 
the bgo's. Therefore, we will consider them as elements of the set L^ x (Act x L^)*. 

It is also clear that the set of linear observations can be defined recursively without 
resorting to branching observations. 

Definition 4.12. The set LGO^ip) of linear general observations of a process p is recursively 
defined by 

LGO N (p) = {(L N (p))} U {(L N (p),a) olgo\p^U p' , lgo e LGO N (p% 

We can also compute LGO^(p) in a compositional way. 

Proposition 4.13. Let L be a local observation function such that there exist semantic functions 
+ L : L;v x L;v — > Ljv and a L : Ljv — > Ljy satisfying L(ap) = a L L(p) and L(p + q) = L(p) + L L(q). 
Then: 

• LGO N (ap) = {(a L L(p))} U {{a L L{p),a) o LGO N (p)}. 

. LGO N (p + q) = {(L(p) + L L(q)) o ( | <L(p)> o £ e LGO N (p) or 

(L(p)) o t e LGO N (q)}. 

Proof Just like that of TheoremgTl D 

Obviously, for N — U we have that LGOu is isomorphic to Act* and thus LGOu(p) — 
Traces(p). By contrast, for N - I, LGOj(p) is the set of ready traces of p, ReadyTraces(p). 

Set inclusion of linear observations with respect to a local observer Ljv gives us the 
preorder defining the corresponding semantics. 

Definition 4.14. A process p is less than or equal to q with respect to the linear observations 
generated by Ln, denoted p <^ q, if LGO^(p) C LGOj^iq)- We will denote the corresponding 
equivalence by =L. 

Proposition 4.15. (1) < l u = E T ; (2) <\ = E RT ; (3) 5^ = E CT . 

Proof. It is trivial, since LGOu(p) = Traces(p), LGOi(p) = ReadyTraces(p), and LGOc(p) = 
{(false, fli) o . . . o (false, a n , true), (false, a\) o . . . o (fa/se, a,-, false) \a\ .. .a n e CompleteTraces(p), i < 
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Proposition 4.16. For N £ {U,C,I,T,S}, if p Ens a then p < l N q, but the converse is false in 
general. 

Proof. The implication follows from Theorem l4.9l and the fact that lgo's are just a particular 
case of bgo's. To see that the converse is false in general consider N — U; we have Eus = Es 
and <„ = Et/ and it is well-known that Es $£ Er since, for instance, a(b + c) ££s a b + ac, but 

a(b + c) =t ab + ac. D 

Therefore, by means of linear observations and set inclusion we can characterize the or- 
ders that define some of the semantics in the spectrum which are not simulation semantics. 
However, there are still some other semantics for which a different way of treating the linear 
observations is needed. We need to introduce some identifications in the corresponding 
domain LGOn to obtain their characterizations. 

Definition 4.17. For T,T' C LGOi we define the orders <f, <\ f , and <'/' by: 

• T <f T' <^ for all X fliXi ...X n eT 

there is some Yofli Y\ ...Y n eT' with X, 2 Y„ for all i e 0..n. 

• T <'/ T' ^^ for all X fliX! . . . X„ e T 

there is some Yo«iYi ...Y„eT' with X„ = Y„. 

• T <'/- T' <^> for all X fliXi ...X n eT 

there is some Yqu{Yi ...Y n eT' with X n 2 Y n . 

Then, for each 5 e {2, /, /2} we write p <f q if LGO^p) <f LGOi{q). 

Since the definition of </ ignores all the intermediate ready sets X, with i < n and 
requires the final ready sets to coincide, it is obvious that it defines the readiness preorder. 
Let us now prove that the two semantics based on failures are also characterized by our 

preorder s <j~ and <' 2 . 

Proposition 4.18. The preorder <-~ generates the failures preorder and <J a generates the failure 
trace preorder. 

Proof. The proof is based on the definition of initial failures of a process: we say that p 

(X 

rejects X if and only if X n I(p) - 0. Then, (a, X) is a failure of p if and only if p => p and p 
rejects X. Using lgo's, for a = a\ . . . a n , (cc, X) is a failure of p iff there exists Xofli ...X n eT~ 
such that X„nX = 0. Thus: 

p Ep p' <=> Failures(p) C Failures(p') 

<=> (a, X) € Failures(p') for all {a, X) £ Failures{p) 
<==> Xofli . . . X„ € LGOi(p) with X„ n X = implies that there exists 
Y fli . . . Y„ e LGOi{p') with Y„ n X = , 

and then p <j~ p' implies p Ef p' . 

Conversely, assume that p Ef p' and recall that p < 7 p' iff for all i = Xofli . . . X n e 
LGOi{p) there exists Yo«i...Y n 6 LGOi{p') such that X n 2 Y n . For each set X, let us 
denote by X c its complement. If t e LGOiip), we have (a,X c n ) e Failuresip) and therefore 

(a, X^) € Failuresip), which implies that there exists p ==> p" such that J(p ) n X^j = 0. This 
means that there is some f - YqUi . . . a n I(p") € LGOi(p') with I(p") c X„, and therefore we 

can conclude that p </~ p' . 

The proof for failure trace is very similar and we omit it. D 
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As a matter of fact, the characterization of failures by means of the reverse inclusion 
of offerings is not a great discovery at all: for instance, the same idea can be found in the 
definition of acceptance trees [29 1. However, our sets of linear observations produce quite a 
nice characterization and allow us to forget about the notion of failures and consider instead 
reverse inclusion of offerings. But the most important property of our characterizations 
in terms of different orders on the set LGO/ is that they can be generalized to other local 
observation functions. 

Definition 4.19. For T ,T' Q LGO N we define the orders <j= <!^, and <^ 2 by: 



N' ~N' ~N 

<r> / s fnr all Y„/7, Y, Y <z T 

N 



• T <'7 T' ^^ for all XqAiXx ...X n eT 



there is some Y fli Y\ ...Y n eT' with X; 2 Y, for all i e0..n. 



• T <■$ 7~' ^^ for all XofliXi ...X„ef 



there is some Yofli Yi ...Y n eT' with X n - Y„ 

N 



• T < -p T' ^^ for all X a 1 X 1 ...X n eT 



a- 



there is some Y fliYi . . . Y n eT' with X n 2 Y, 
Then, for each 5 e {2, /, /2} we write p <£ <j if LGOAf(p) <g LGO N (q). 

By abuse of notation, we have used the superset inclusion symbol 2 in the definitions 
above for any N. That is indeed the right interpretation for the cases N - I,T; however, 
for N - U,C the superset inclusions degenerate to equalities while for N = S it should be 
interpreted as [pjs >s Ms- Then, with the right notation we could have used such an 
inequality Ipliv >n Mn in all the cases. 

When defining an observational semantics one expects the order between processes 
to be plain set inclusion as is the case, for instance, for the classic definition of failures 
semantics. Fortunately, it is easy to obtain such a characterization for the three semantics 
considered above by means of some suitable closure operators. 

Definition 4.20. For T C LGOn, the following three closures are defined: 

• T - {XofliXi . . . a n X n I there is some Yofli Y\ . . . a n Y n e 7~ with X,- 2 Y, for i e 0..n}. 

• T - {XofliXi . . . a n X n I there is some YqUi Y\ . . . a n X n e T). 
—/a 

• T = {XofliXi . . . a n X n I there is some Yofli Y\ . . . a n Y n e T with X n 2 Y n }. 

Proposition 4.21. All the operators in Definition \4.20\ are indeed closures: if 5 e {2,/,/2} and 

T, T' c LGO N , then fcf and ~T = ~T ; also, ifT C T' then ~T 'cf' \ 

Proof. The first and third conditions are immediate from the definitions. As for the second, 

let XofliXi . . .a n X n e 7" . Then, there exists Yofli Yi . . .a n X n e T and thus there exists 

ZofliZi . . . a n X n E T , which implies XofliXi . . . a n X n e T ; the inclusion in the other direction 
follows from monotonicity Analogously for the other two operators. □ 



=6 



Proposition 4.22. For all 5 e {2,/,/2}, T < l °T' iff T cf . 

Proof. It is easy but tedious, so only the case 5 - /2 is presented in detail. Assume 

-N 



T < l [^ T'\ for all t = X fliXi . . .a„X n e T there exists Y fliYi . . .a n Y„ e T' with X n 2 Y n 



— /2 — /a —/a — /a 

and hence t e T' and T c T' ;T c T' follows because of the properties of closures. 
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— /a — /a — /a 

Conversely, from 7" C T' it follows that T C 7"' and thus for all XofliXi . . . fl n X n e 

7" there exists Yo«i Yi ...a n Y n eT' with X„ 2 Y„: therefore T" <JJ 2 7"'. □ 

Definition 4.23. For each 5 e {2,/,/2}, p e BCCSP, and N a constraint, we define 



LGO» = LGO N (p) . 

Let us see which of the semantics in the spectrum are characterized by the orders <$, 
defined above. 

Proposition 4.24. For N - U we have <L - <!j = </j = < u ~ = E T . As a consequence, the only 
semantics coarser than plain simulation that can be characterized by means of linear observations 
using Lu is the trace semantics. 

Proof. The first three equalities are obvious since U provides useless (empty) local infor- 
mation (Lu = {•})■ The last equality was proved in Proposition l4.15f l). □ 

Proposition 4.25. For N - C we have <L = <£ = <l = <t~ - ^ct- As a consequence, 
the only semantics coarser than complete simulation that can be characterized by means of linear 
observations using Lq is the completed trace semantics. 

Proof. Note that the local information at the intermediate steps of traces in LGOq has to be 
false, since it corresponds to non-terminated states; thus, only the final states provide real 
information. Since in this case 2 corresponds to Boolean equality, the first three equalities 
follow; the fourth was proved in Proposition |4.15D ). □ 

Proposition 4.26. ForN - I, <{~ characterizes the failures semantics, <j the readiness semantics, 
<j a the failure trace semantics, and <l the ready trace semantics. Therefore, the possible worlds 
semantics is the only semantics in the Itbt spectrum coarser than ready simulation that cannot be 
characterized using Igo/s. 

Proof. We have already proved (Propositions 14.151 and 14.181 ) the four characterizations, 
while Qpw cannot be characterized using lgo/s because all the information available in our 
lgo/s was needed to capture the ready trace semantic and it is well-known that the possible 
worlds semantics is strictly finer. □ 

As we will see in Section 14.31 the possible worlds semantics is the only deterministic 
branching semantics in the spectrum and will require the use of the deterministic branching 
observations introduced there to be characterized in an observational way. This is not the 
case, however, for the possible futures semantics (already discussed in 11581 ), and the 
impossible futures semantics [59]. 

Definition 4.27. 

(1) The impossible futures semantics is defined as: p E ff q if for all S c ^(Act*), if 
p=Z$p' with T(p') nS = ® then there exists q^q' with T{q') C\S = ®. 

(2) The possible futures semantics is defined as: p ^pf q if p ==> p' then there exists 
q =£> q' with Tiff) = Tip'). 

Proposition 4.28. 

(1) <j is the possible futures preorder. 
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(2) <j. is the impossible futures preorder. 



JfD ,,-„ ^ 



Proof. 

(1) Obvious. 

(2) Assume that p <^~ q. Then p ==> p' , with a - a\...a n , implies q ==> q' with 

T(q') c T(p'). Therefore, if p =^> p' with T(p')nX = then ,7 =^> </' with T(^)nX = 
which implies p E/f P' • 

Conversely, if p E 7F <j, t = XqciqXi ...X n e LGOj{p) and p => p' with a-a\...a n , 
obviously we have T(p') n T(p') c = 0, where T(p') c just represent the complement 
of the set T(p'). Now applying the definition of Qf, we have some q => q' with 
T(^)nT(p') c = 0- Hence, there exists V = Xyi X[ ...X' n e LGO T (q)withT(q') C T(p')/ 



which implies p <i ^. 



D 



As a matter of fact, the possible futures semantics is just below the 2-nested simulation 
semantics in the spectrum only because the trace simulation semantics is missing there. 

At this point we are ready to present our first two "missing links", which arise through 
the remaining two orders: <L and <!"? . 

Definition 4.29. The possible futures trace semantics is defined by lgo T 's related by <' and 
the impossible futures trace semantics is defined by <B. 

Let us complete this part of the new extended spectrum by introducing the diamond 
generated by lgo s 's. This produces four new semantics coarser than 2-nested semantics. 
For instance, for the case of failures we obtain the following definition. 

Definition 4.30. The extended simulation failures of a process p are defined as 

ExtSimFailures(p) = {{a,p") \ a e A* ,p => p' ,p' != s p"\. 

The simulation failures of a process p are defined as SimFailures(p) - {(a, B) | p =» p',B n 
BGOu(p') - 0}- We write p Q$f tf iff SimFailures(p) C SimFailures(q). 

It can be proved that the inclusion SimFailures(p) C SimFailures(q) holds if and only if 
ExtSimFailures(p) C ExtSimFailures(q). Thus, simulation failures are essentially defined by 
translating the characterization of ordinary failures with the closure of readiness. 

Proposition 4.31. <^~ = E SF . 

Proof. Analogous to the characterization of E F in terms of </~. □ 

4.3. Deterministic branching observations. 

Definition 4.32. 

(1) We say that a bgo is deterministic if the set of children { (a,, bgo^)} of every node satisfies 
a, ± a; whenever i ± j. We denote with dBGO^ the set of deterministic observations 
in BGO N . 

(2) The set of deterministic branching observations (dbgo for short) of a process p is 
dBGO N (p) = BGO N (p) n dBGO N . 
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Figure 9: Deterministic branching observations. 



(3) We write p < d * q if dBGO N (p) C dBGO N (q). 

Like the linear observations, the set dBGO^ip) can be defined recursively and the corre- 
sponding semantics, compositionally. 

Example 4.33. For the two processes p = a(bc + bd) and q = abc + abd we have that both 
deterministic observations in Figure|9]belong to dBGO\{p) and dBGOi(q). Indeed, that must 
be the case since it is easy to check that dBGOj(p) - dBGOj(q). 

In order to prove that dbgo's for the constraint I characterize the possible worlds 
semantics we first recall the definition of that semantics in 158]). 



Definition 4.34. A deterministic process p is a possible world of a process q if p Ers q- 
The set of possible worlds of p is denoted by PW(p). We define the order p E PW q iff 
PW(p) c PW(q). 

When defining the possible worlds of a process we have to solve all the non-deterministic 
choices in it, each choice leading to one of its possible worlds. The same idea supports the 
selection of dbgo's to characterize this semantics: the non-deterministic branching obser- 
vations in BGOjv(p) are not present in dBGOfq(p), where we have instead all the possible 
deterministic subtrees of every branching observation. 

In our proof below we will relate the dbgo's in dBGOi(p) and the possible worlds 
in PW(p). When necessary, we will consider observations in dBGOi(p) as processes in 
BCCSP by removing the information from their nodes; by abuse of notation we will also 
denote with dbgo the process obtained after such a removal. Also, we call complete those 
observations that, for every node labeled by an offering A, have a branch labeled by each 
of the actions in A. 

Definition 4.35. The set of complete deterministic branching observations for the local ob- 
servation function L; is the set cdBGOi Q dBGOi recursively defined as: 

• (0,0) e cdBGO h 

• {A, {(a, cdbgo a ) | a e A}) e cdBGOi for every a e A and cdbgo a e cdBGOi . 

For each p e BCCSP we define its set of complete deterministic branching observations 
cdBGOi(p) = dBGOi{p) n cdBGO h 

We also associate to a deterministic process q its universal (complete deterministic) 
branching observation. 

Definition 4.36. For a deterministic process p, its universal deterministic branching observa- 
tion cdbgo(p) is: 
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• C%O(O) = <0,0>. 

• cdbgo(ZaeA a Pa) = (A {(a,cdbgo(p a )) I a € A}}. 



The following result is now immediate. 
Proposition 4.37. For every p e BCCSP, cdbgo(p) e cdBGOi(p). 
Lemma 4.38. For every q e PW(p), cdbgo(q) e cdBGOi(p). 

Proof. By structural induction on q: 

• If if is 0, then p = and (0, 0) e cdBGO/(0). 

• If q is £ aq a , since ^ 6 PW(p) we have q Ers p. This implies I(q) = I(p) and that, for all 
a e A, there exists p — > p a , q a Ers P«/ so that q a e PW(p a ). By induction hypothesis, 
cdbgo(q a ) £ cdBGOi(p). Now, by definition, cdbgo(q) - (A,{(a,cdbgo(q a )) \ a e A)}) 

and, from p — > p a and I(p) = I(q), we conclude cdbgo(q) e dBGOi(p) and therefore 
cdbgo(q) e cdBGOi{p). 

□ 

Lemma 4.39. For ez;ery process q such that cdbgo(q) e cdBGOj(p) we have q Ers V an & therefore 
qePW(p). 

Proof. We will prove that the set S = {(q,p) \ cdbgo(q) e cdBGOi(p)} is a ready simulation. 
Obviously, for (q,p) e S it is I(q) - I(p) and, if q — > q a , there exists p — > p a with cdbgo(q a ) e 
cdBGOi(p a ), which shows that {q a ,p a ) e S and that S is a ready simulation. □ 

Theorem 4.40. For all processes p\,p2 € BCCSP, p\ Epw P2 #Tpi ^f Pi- 

Proof. (<=) For q e PW(pi), by Lemma 14.381 we have cdbgo(q) e cdBGOi{p\) and therefore 
cdbgo(q) € cdBGOi(p2). Now, by Lemma |4~39l q Ers P2 and thus q e PW(p2). 

(=>) Let dbgo 6 dBGOi(pi): by definition of dBGOi(p\) it is clear that we can extend 
dfcgo into some dbgo' e cdBGOi(p\). Now, by Lemma T4.391 dbgo' Ers pi (taking dbgo' as 
a deterministic process). Therefore, dbgo' € FW(pi) and thus dbgo' € PW(p2) and, by 
Lemma 14.381 cdbgo(dbgo') = dbgo' e cdBGOi(p2)'. hence dbgo e dBGOi(p2) as required. □ 

Remark 4.41. If we consider infinite processes, then our characterization of Epw by means 
of <^ fo only works if we restrict ourselves to image-finite processes. We will continue the 
discussion on this part when studying the logical characterization of this semantics at 
Section [6l 

Let us briefly consider the remaining new semantics definable by means of determin- 
istic branching observations. It is clear that in all cases the corresponding orders verify 
<^ E <^ E <^, so that the associated semantics will be situated between the corresponding 
semantics defined by branching observations in BGOn and linear observations in LGOn, 
as is the case for the possible worlds semantics, located between the ready simulation 
semantics and the ready trace semantics. 

Admittedly, most of these semantics are rather strange and this is probably the reason 
why, as far as we know, they have not been previously considered. However, the simplest 
of them all, that corresponding to N - U, has properties similar to the possible worlds 
semantics and, in fact, can be defined by simply removing from its definition the "R" 
in the condition q Ers p. Hence, we can regard as possible worlds those deterministic 
implementations where we offer just a part of the action offered by the given process. 
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Figure 10: Basic layer in the linear time-branching time spectrum. 



New 




Figure 11: Semantics in the new linear time-branching time spectrum. 



Definition 4.42. The partial possible worlds of a process p are those deterministic processes 
that verify q Eg p. We denote with PWu(p) the set of partial possible worlds of a process p 
and define p Qupw q if PW u (p) C PW u (q). 

Proposition 4.43. For all processes p\,pi e BCCSP, p\ Qupw Pi iff Pi ^ff Pi- 



Proof. Similar to Theorem |4.40[ simplified by the fact that all dbgo in PWu(p) satisfy dbgo E s 
p. " D 

Example 4.44. Wehavea Eupw a+b since (-,{(«, 0)}) e dBGOu(a+b). By contrast, for p - ab+ 
ac and q = a(b + c) we have p E UPW q but q £upw P because (•, {(a, (•, {(b, (-, 0», (c, <-, 0))})}) € 
dBGO u (q) ~ dBGO u (p). 

Analogously for any other constraint N we could define the N-possible worlds order 
Qnpw using E NS instead of Es at Definition 14.421 However, it is easy to see that when N 
is fine enough, e.g. N — T, this order would become totally wrong. Instead, we can still 
consider the observations in dBGO^ and by means of them we define the "reasonable" 
deterministic branching semantics, for any layer in the spectrum. 

The extended spectrum can now be depicted as in Figures ITT1 and HOl 



4.4. Back to branching observations. The orders <^ with 5 € {2,/,/2} that characterize 
some of the linear semantics studied in Section 14.21 restricted in several ways the use 
of the local information, when characterizing those semantics. The same scheme can be 
generalized to the branching observations. This way, for each constraint N we would obtain 
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three new branching semantics based on bgo's in BGOn which, together with the original 
N-simulation semantics, would constitute a diamond of branching semantics at a higher 
layer in our extended ltbt spectrum. The introduction of these new semantics also offers 
a clearer view of the spectrum, with two main levels of branching and linear semantics 
and an intermediate one of deterministic branching semantics. Although this provides the 
means for obtaining a host of new semantics, it is also true that most of them are bizarre, in 
sharp contrast with the fact that the corresponding orders gave rise to interesting semantics 
when applied to linear observations. 

To illustrate the comments above, next we consider in some detail the case N — I, which 
corresponds to the most interesting semantics. 

Definition 4.45. For bgo, bgo' e BGOi we define: 

• bgo <j bgo' <=> (bgo - (A\, Si) and bgo' - (A 2 , S 2 ) and A\ 2 A 2 and 

Si = {(oi, bgo t ) \i 6 1} and S2 = {(«;, bgo'j) \i e 1} and 
for all i € I (bgo { <f bgo'M . 

• bgo <[ bgo' <=> (bgo = {Ax, 0) and bgo' - (A x , 0)) or 

(bgo = (A\, Si) and bgo' - {A 2 , S 2 ) and 
Si = {(«,-, bgo t ) I i 6 1} and S2 = {(a,, bgo\) \iel\ and 
for all i £ I (bgo i <j bgo-)) . 

• bgo <[- bgo' <^^> (bgo = (Ax, 0) and bgo' = (A 2 , 0) and A x 2 A 2 ) or 

(bgo - (A\, Si) and bgo' - (A 2 , S 2 ) and 
Si = {{ai, bgo ( ) \iel} and S 2 = {{a ir bgo^) \iel} and 
for all i e I (bgo { <j~ bgo'^) . 

Definition 4.46. For S, S' C BGO/ and 5 6 {2, /, /2}, we define the orders <f by: 

• S < h j 6 S' <=^> for all bgo e S there exists bgo' e S' with bgo <^ bgo'. 
Then, we write p <f q if BGOiip) <f BGOi(q). 

It is somewhat surprising to discover that <j - <°, since this was not the case for their 
linear "projections" <| 3 and <\. 

Proposition 4.47. For all -processes fi,p 2 € BCCSP, p\ < h j~ p 2 iffpi <\ p 2 - 

Proof. Assume that p\ <^- p 2 and let bgo e BGOi(p\): it is clear that it can be extended into 
a complete cbgo e BGOi{p{). Then, there exists some cbgo e BGOi(p 2 ) with cbgo <f cbgd 
and, since cbgo is complete, cbgo - cbgo' and hence bgo € BGOj(p 2 ). The other implication 
is trivial. □ 

Example 4.48. For p\ = a(b + c) and p 2 = ab + ac, y>\ < 1 ^ p 2 but p\ iL\ p 2 . However, p\ £°- p 2 
since for bgo = <{fl},(fl,({b,c},{(b,0),(c,0)}))) 6 BGO/(pi) there is no bgo' e BGOi(p 2 ) with 
bgo <p bgo' . 

By contrast, the branching semantics defined by <r and <J ~ are indeed new. 

Example 4.49. For the processes p and q in Figure H2l p <^ q but p ^ q. 
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Figure 12: Three processes. 



This example shows that it is quite difficult to characterize this semantics as a simulation 
one. Furthermore, we conjecture that it is not finitely axiomatizable in the classic way (that 
means using only unconditional axioms). As a matter of fact, we were also unable to find 
any conditional axiomatization, what we interpret as a "proof" of the fact that these new 
branching semantics are quite strange. 

Definition 4.50. We say that R C BGOi x BCCSP is a final-ready simulation when: 
• ((A, 0), q)eR implies I(q) = A. 



• ((A, {(a,, bgo^}), q) e R implies that for all i e I there exists q 
R. 

We say that p is final-ready simulated by q when for all 
final-ready simulation R with (bgo, q) € R, and write p E/rs q- 

Theorem 4.51. For all p, q e BCCSP, p c^ s q iffp <* q. 



— -> q\ such that (bgo { , qf) e 
e BGOj(p) there exists a 



bfz 



Example 4.52. It is easy to check that for p and q' as in Figure H2l we have p <, q' but 

V if <? • 

Final failure simulations are defined exactly like final-ready simulations but substi- 
tuting I(q) C Act for I(q) = A in the first clause, giving rise to the order E^: S between 
processes. 

Theorem 4.53. For all p,q 6 BCCSP, p E/fs q WV -r ~ 1- 

As previously noted, these are certainly bizarre semantics but we believe it is interesting 
to indicate their existence because, by analogy to the linear case, their definitions in terms 
of branching observations look quite natural. However, it also seems that when dealing 
with branching observations the introduction of any kind of asymmetry in the treatment 
of local observations produces quite involved semantics. 
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5. Relating the observational and equational frameworks 

In this section we tie up all loose ends and show how our unification theory is fully 
self-contained. Namely we prove the results on axiomatic characterizations in Section [3] 
from the observational semantics developed in Section HJ we show how the equations are 
deduced from the observations in a general way without resorting to the already existing 
axiomatizations . 

One of the key points of this section is to illustrate how the particular proofs needed in 
Section [3] for every one of the semantics can be replaced by a generic proof that stands for 
a whole family of semantics. In fact, we will show in Section [8] that the same proof is still 
valid for the new semantics suggested in Roscoe's work. 

5.1. Semantics coarser than ready simulation. Let us now see how, from this uniform 
definition of the linear semantics, the proofs of the correctness and completeness of the 
corresponding axiomatizations can be derived in a uniform way avoiding the case analyses 
of Sections 13.11 and [3721 Although this could be done generically, with N e {U,C,I, T}, we 
prefer to start with the particular case N — I, which corresponds to the most popular 
semantics already studied in Section |37u 

To start with, we show how the axiomatizations can be synthetized from the obser- 
vational characterizations. Our general axiom (ND) for the reduction of non-determinism 
specifies the hypothesis M(x, y, w) under which the process ax+a(y+w) can be (syntactically) 
expanded by adding a new summand a(x + y) without changing its semantics. Then, let us 
compare the two sides of our general axiom. Since I(ax + a(y + w)) = I(ax) = I(a(y + w)) = {a}, 
we have 

LGOi(ax + a{y + w)) - LGO^ax) U LGOi(a(y + w)), 

LGOMy + w)) = KM>}U 

{({a}, a, I(y + w))oS\ ({a}, a, %)) oSe LGO^ay) V 
({a},a,l(w)) o S e LGOi(aw)}. 

Notice then that the observations of a(y + w) are exactly those of ay + aw simply replacing 
I(y) or I(w), respectively, by I(y + w) = I(y) U I(w). Analogously, 

LGOMx + y)) = {<{«})} u 

{({a),a,l{x + y))oS\ ({a},a,I(x)) oSe LGO^ax) V 
({a},a,I(y)) oSe LGOi(ay)}. 

Now, in order to get the adequate condition Mz(x, y, w) for each of the semantics, let 
us examine the formulas that define the preorders <| Y : 

• <{. To have LGOi(a(x + y)) c LGOi(ax) U LGOi(a(y + w)) it is enough to require 
{({a),a,l{x) U l{y)) o S | <J(x)> oSe LGOi{x)} C {({a}, a, l{x)) o S | <J(x)> oSe LGdix)} 
and {({a}, a, I(x) U J(y)> o S | <%)> o S e LGOi{y)} C {{{a},a,l{y) U I(w)) o S \ (I(y)) oSe 
LGOi(y)}. Thus, a first proposal for Mrt would be 

I(y) £ I(x) A I(x) = I(y) U I(w). 

However, due to the fact that this axiom will be used in combination with (RS), the 
following, more restrictive but simpler form, can be used instead: 

M RT (x,y,w) <=> I(x) = I(y) A I(w) Q I(y). 
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Clearly, this form is stronger than the condition synthetized above. Reciprocally 

a(x + y) < ax + a(y + w) can be proved from the assumptions I(y) C I(x) and I(x) - 

I(y) U I(w) using (RS) first to get a(x + y) < a(x + y + w), and then (ND) instantiated 

with Mrt to obtain a(x + y + w) < ax + a(y + w). 
i-. 2 2 

• <r. We need the inclusion LGOi(a(x + y)) C LGOi(ax + a(y + w)) to hold. Since 

I(x) U I(y) 2 I(x), the general observations in a(x + y) that arise from x will be also 

/a 

in LGOj(flx) . For those that arise from y, it is required that I(x) U l(y) 2 I(y) U I(a;). 

Once again, (RS) can be used to simplify this condition into the simpler 

Mfr(x, y, w) <==> l(w) c I(y). 

The less restrictive variant of the axiom can be derived from the stronger one and 
(RS) as follows. Taking w - 0, since 7(0) c l(y) we obtain a(x + y) < ax + ay from 
(ND FT ); in particular, a(x+y+w) < ax+a(y+w). Also, by (RS),x+y < (x+y)+(x+y+w), 
from where it follows a(x + y) < a(x + y + w). 

• </. We consider the inclusion LGOj(a(x + y)) c LGOj(ax + a(y + w)) . We only 
have to consider the lgo ({a},a,I(x) U I(y)) in LGOi(a(x + y)) and show that it also 

belongs to LGOi(ax + a(y + w)) , since all lgo's of length greater than 1 start with 
the prefix ({a}, a). For that, either I(x) U I(y) = I(x) or I(x) U I(y) = I(y) U l(w), that is, 
I(y) c J(x) or J(x) U I(y) = I(y) U 7(w). Again, we can remove the second condition 
and define 

M R (x,y,w) <^ I(y)Ql(x) 

since, whenever I(x) U I(y) - I(y) U I(w), a(x + y + w) < ax + a(y + w) can be obtained 
by taking x - y + w, y — x, and w — 0, and then by applying (RS) we conclude 
a(x + y) <ax + a(y + w). 

• <f~. An argument analogous to the previous one leads us to check that I(x) U I(y) 2 
I(x) or I(x) U I(y) 2 I(y) U /(w), and the first is certainly true. 

In order to prove the completeness of our axiomatizations we introduce the following 
notions of head normal forms. 

Definition 5.1. For p = L fl ex T.iei a a V\ an d Z e {F, R, FT, RT}, its Z-head normal form hnf z (p) 
is: 

• For a € Xo, i £ I a , and Xi c [j ieIa I(p' a ) such that I(p' a ) c X\, we define hnf z (p, a, i, X{) - 

a(pi + LiPalxj I /' t i / Mz(plp , a\x 1 ,p' a \x;)})- 

• hnf(p) = p + L fleXo Ziei a Lxisu M) hn f(P' a > l ' x i)- 

It is clear that several redundancies arise in this definition: for example, if Z = RT 

7 7 

then hnf (p,a,i,X\) - hnf (p,a,i,I(p l a )), so that the argument Xi would not be needed in 
this case. We prefer to maintain the generic definition in order to allow a homogeneous 
treatment of all the semantics. 

Proposition 5.2. For Z e {RT,FT,R,F}, {B1-B4, (RS), (ND Z )} h hnf z (p) < p. 

Proof. Let p = LaeX Liel a ¥a- 

Considering the definition of hnf (p, a, i, X\), let us consider an enumeration of the set 
of j's contributing to it: If /; = {;' t i \ Mz(Pa,p'a\x u Pa\ x -^)}, we take {j k \k = l... \} { \} = /,-. 
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Then we can prove by induction on Z that for allO < / < |/,| we have {B1-B4, (RS), (ND Z )} \- 

The case of / = is trivial. Assuming the result for /, we prove the result for / + 1. 
From Mziplp 1 * t \x 1 ,V 1 t 1 \^) w e can infer M z (p[ + £j, =1 p'a\x ir Pa +1 \x u Pa + \) so that we can 

derive h a(p l a + £fe= 1 iP«'lx 1 ) ^ fl (P« + Tlh=iPa) + fl P« +1 / an d applying the i- n - we conclude 
{B!-B 4 , (RS), (ND Z )} h a(p\ + £££ ^| Xl | Xl ) < ap\ + £{£ <• 

From this we immediately obtain {B1-B4, (RS), (ND Z )} \- hnf z (p,a,i,X\) < p\ a . Finally, 
adding all these inequalities we conclude {B1-B4, (RS), (ND Z )} h hnf z (p) <p. D 

Let us define 1(F) = IfD, l(FT) = I'D, l(R) = If, and l(RT) - I. In order to apply structural 
induction to prove the completeness of the axiomatizations we need to show that, whenever 

P = T, a ex T^ieia a Pa an d P ^/ q, there is a summand ah k of hnf z (q) such that p' a <f ' h k for 
each a e Act, i e I a . 

Proposition 5.3. Let Z 6 {F,FT,R,RT}, and let p = L fleXo £ Mfl ap[, and q = L aeXo L /e/n aq{. If 
p <j q then there exists a summand ah k ofhnf (q) such that p' a < 7 h k a . 

Proof. Using Definition 14.191 and Proposition 14.221 we need to show that there exists 

H(Z) -l(Z) _ /(Z) 

LGOi(p' a ) c LGOiQq) but, due to the fact that (_) is a closure operator (Proposi- 

l(Z) 

tiong2U), it is enough to prove that LGOi(p l a ) C LGOi(h k a ) . For (I(p l a )) e LGOi(p l a ), since 
ah k . 



1(7) j ' i l(Z) y 

p <, q there is some q' a such that (I(p' a )) e LGOi(q' a ) ; we then consider hnf (q, a, j, l(p l a )) 



l(Z) 

If t € LGOi(p x a ) then (l(p),a) o t € LGOi(p) C LGOi(q) and there exists ;' f such that 

-l(Z) 



t 6 LGO^q'J) . In addition, M z (^, tf^, q'alj^Y- 

• If Z = RT, then t e LGO^q'J) and therefore %j) = !($) = I(^). Hence, condition 
M RT (ql q'a\ m) , 0) holds and therefore M RT (q' a , q%^ y q ] J |— -). 

r- 3 

• If Z = FT, from f 6 LGO^q'J) it follows that %J) C I(p'J) and therefore I^b-jr) = 

C I(^| 7W) ). Hence, M FT (q ] a,qa\ m , qa\j^)- 

. If Z = R, from <!(#)> € LGO^qi) we have that I(p^) = l(q[) and thus /(A^)) C Z(^) 
andM R (^,^| 7W) ,^|^y). 

• For Z = F it is trivial since Mp(i, y, w) is always true. 

Therefore q„ is one of the summands of h k and, since t e LGOi(q ] J) , we have p l a <} h k . D 

Theorem 5.4 (Soundness and completeness). For Z e {RT, FT, R, F}: 

p <f ] q W{Bi-B A , (RS), (ND Z )} vp<q. 

Proof. (Soundness) The axiomatizations are sound because of the way they have been 
derived. 

(Completeness) By structural induction on p. 
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Let p be 0. As usual, we can consider terms up to bisimulation since B1-B4 are 

HZ) 
equations needed for all the semantics. If p <} q, then q must be (or bisimilar 

to 0) because the set of local observations of is empty and cannot contain any 
observations (see Definition |4.191 ) 

If P - JLaex Tjiei a a Pa then, by Proposition 15.31 p < 7 q implies that there ex- 
ists a summand ah\ of hnf (q) such that p l a <. h\. By induction hypothesis, 

{B1-B4, (RS), (ND Z )} h pi < h\ and therefore {B1-B4, (RS), (ND Z )} h ap[ < ah\; 
adding all these inequalities and using (RS), which is allowed because I(p) = 
l{q), it follows that {B1-B4, {RS), (ND Z )} V p < hnf z (q) and, by Proposition K2\ 
{B 1 -B i ,(RS),(ND z )}^p<q. 

D 



5.2. The semantics that are not coarser than ready simulation. Once we have a clear 
picture of the semantics that are coarser than ready simulation, it is time to consider 
the rest of the semantics in the spectrum. Let us start with the possible futures and the 
impossible futures semantics. Recall that we have shown that they can be described by 

LGOt observations so that they are defined by <l~ and <j , respectively. 

We introduce the T- versions of our (ND ) axioms: all of them are instances of our 
general axiom for the reduction of non-determinism and therefore are defined by the 
adequate constraint M^(x,y,w). As expected, they are obtained by substituting every 
occurrence of I in Mz(x, y, w) by the observer T defining the traces of processes. 

Definition 5.5. The constraints M^ that characterize the semantics coarser than T-simulation 
semantics are: 

(T-NL?) Mj(x,y,w) ^^ true 

(T-ND R ) M T R (x,y,w) ^ T(x)DT(y) 

(T-ND FT ) Ml T {x,y,w) ^> T(w)cT(y) 

(T-ND RT ) M T RJ {x,y,w) ^^ T(x) = T{y) and T{w) c T(y) 

As indicated in Section 14.21 (Definition 14.291) , the semantics associated to the last two 
conditions do not appear in the ltbt spectrum and, as far as we know, they have not been 
previously studied nor even defined. 

Using the same arguments as in Section IBTTl we can prove that <^ satisfies the axiom 
(T-ND Z ) for Ze {RT,FT}. 

Proposition 5.6. M^(x,y,w) implies T(a(x + y)) - T(ax + a(y + w))for Z e {_RT,FT}. However, 
this is not the case for Z e {R, F} 

Proof. M RT implies Mj T , and therefore T(y + w) - T(y), which leads to T(ax + a(y + w)) = 
T(a(x+y)). Neither M R nor Mj refer to wand therefore, in general, T(ax+a(y+iv)) t T(a(x+y)) 
in those cases. □ 
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Note that when proving the correctness of the corresponding axiom (ND ) for <. we 
had I(a(x + y)) = {a} = I(ax + a(y + w)) in all cases. Now, T(a(x + y)) - T(ax + a(y + w)) only 
under the constraints corresponding to the finer semantics Eft and Erj. The properties of 
the prefixes appearing in all the terms in both sides of the axiom (ND) are not used anymore 
in the proofs in Section l5Tl so they can be transferred to the T-semantics, thus proving the 
correctness of (T-ND Z ) for both <J RT) and <f T) . 

The introduction of the equational version (ND=) of the axiom (ND) now becomes 
crucial in order to preserve the generality of our unifying work. We saw that under (RS) 
these two axioms were equivalent. However, when observing the set of traces T(x) of any 
process, instead of just the initial offer I(x) we need to consider T-simulations, that are 
constrained by the condition T(x, y) <=> T(x) - T(y); under the corresponding axiom (TS), 
things turn out to be different. 

Proposition 5.7. T(a(x + y) + ax + a(y + w)) = T(ax) U T(ay) U T(aw) = T(ax + a(y + w)). 

As a consequence, for (T-ND + ) and (T-ND=) we can apply the same arguments used in 
Section l5Tl to show that (ND ) was satisfied by <, . 

Proposition 5.8. For Z e {RT, FT, R, F}, the f reorder <^ ' satisfies the axiom (T-ND+) and also 
(T-ND Z ). 

Proof. To show that <^ satisfies (T-ND + ) we just need to apply Proposition l5.7l and follow 
the line of thought in the second bullet on page |38j substituting the observer T for I. For 
the other axiom, from T(a(x + y)) c T(ax + a(y + w)) it follows that {(TS)} \- ax + a(y + w) < 

(ax + a(y + w)) + a(x + y). □ 

Notice that for Z e {RT,FT} we can also obtain the correctness of (T-ND=) from that of 
(T-ND ) and vice versa, as a consequence of the following fact. 

Proposition 5.9. The axiomatization {B1-B4, (TS), (T-ND Z )} is equivalent to the axiomatization 
[B X -B A , (TS), (T-NDl)}for Z £ {_RT,FT}. 

Proof. Let us first show that {B1-B4, (TS), (T-ND Z )} is equivalent to {B1-B4, (TS), (T-ND Z )}. 
This holds because (T-ND Z ) implies (T-ND Z ) and, since T(w) c T(y) implies T(a(x + y)) = 
T(ax + a(y + w)) and then we have {B1-B4, (TS)} \- a(x + y) < a(x + y) + (ax + a(y + w)). 

To prove {B^, (TS), (T-ND Z )} equivalent to {B^B^, (TS), (T-ND Z )} we only need to 
show that {B1-B4, (TS), (T-JVDf )} h (M T z (x,y,w) => ax+a(y+w) < ax+a(y+w)+a(x+y)), butwe 
have that for Z 6 {RT,FT},M^(x, y,w) implies T(w) c T(y), so that T(a(x+y)) - T(ax+a(y+w)) 
and therefore {(TS)} \- ax + a(y + w) < (ax + a(y + w)) + a(x + y). D 

HZ) 

The important fact about the obtained sets of correct axioms for the semantics <^ 
is that, although our proofs of completeness for the axiomatizations {B1-B4, (RS), (ND Z )} 
considered the inequational axioms (ND ), they are also valid for the axiomatizations 
{B!-B4,(RS),(ND2)}. 

The steps in the procedure that leads to the completeness of {B1-B4, (RS), (ND Z )} can 
be adapted by substituting each reference to the observer I by T, thus obtaining a proof of 

the completeness of {B1-B4, (RS), (T-ND=)} for <^, . However, the notion of head normal 

form for N = I uses the fact that the summands hnf (q, a, i, Xi) can be defined in terms of 
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the offers X\ C l P(Act), which correspond to the values produced by the observer I. For an 
arbitrary N, a more general definition of hnf 's, valid for every observer, is needed. 

Definition 5.10. For p - L fl ex Tiieig a Pa' its totally expanded Z-head normal form tehnf N (p) 
is that given by: 

• For a € Xo, i € I a , and K a c l a we consider a decomposition p k a = p^ + p a 2 such that 

M%(pi,p k a \p>?). Then, tehnff,(p,a,i,«J&,r%))kaO = «<pj + LfeK fl Pa 1 )- 
. tefcn/* (p) = L fefcnf * (p, fl/ z - ((p £ / p fe )>fe ^ } 

It is clear that for K' a C K fl/ or any decomposition p\ = p a 3 + (p/ + p a 2 ) with p/ = p a 3 + p^, 
the corresponding tehnf N (. . .) is a subterm of tehnf N (p, a, i, (p^ ,p a 2 )keK a ) an d thus contributes 
nothing to the expanded normal form. This is the reason why we preferred the more 
compact definition of hnf (p) for semantics coarser than ready simulation. 

Theorem 5.11. For Z e [RT, FT, R, F), {Bi-B 4/ (TS), (T-ND^)} \-p<qifand only ifp <\ z) q. 



6. Logical characterization of semantics 

The third and a very natural alternative to associate a semantics to processes lies in the 
logical framework. This is indeed quite a natural way to do it. We have a language to 
express properties of processes and a way to check whether a process satisfies a formula 
of the language: then, two processes are equivalent with respect to this semantics if and 
only if they satisfy the same set of formulas. In fact, the semantics can also be defined 
in terms of the induced preorder that indicates whether a process satisfies more formulas 
than another one. 

Each subset X of JLhm induces a semantics as stated in the following definition. 

Definition 6.1. Any subset £, of £hm induces a logical semantics for processes, given by 
the preorder c_r: p c^ q whenever for all <p € £., if p |= cp then q \= cp. We say that X and £,' 
are equivalent, and we write X ~ -£', if they induce the same semantics, that is Ex = E_f'. 

Let us start with a look at Table which contains the logical characterization of each 
of the semantics in van Glabbeek's spectrum. Xz with Z e {T, CT, F, FT, R, RT, PF, S, CS, RS, 
2S,PW,B} denotes each of the logics; the dots indicate the clauses needed to obtain the 
corresponding languages; and the boxes marked with v correspond to rules that could be 
added to Xz/ but would only introduce redundant formulas. The following constructs, 
which appear in the table but are not in JLuUr can be obtained as syntactic sugar: 



X := l\ -,AT X<p' := X A <p' := Act 

aeX 

(pi A (p2 := A (pi X :- A flT A A -iflT X(p' :- X A (p' (f:= -i«T 
!6(1,2| aeX aiX 

Disjunction does not appear in £.hm and therefore neither in any of the logics Xz 
characterizing the semantics in the ltbt spectrum. It is probably folklore that it can be 
added in all cases without affecting the expressive power of each of these logics, but since 
we have not found a clear statement in this direction in any of our references, next we 
establish the result and comment on its proof. 
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Table 3: Van Glabbeek's logical characterizations for the semantics in the ltbt spectrum. 



Proposition 6.2. Let us define L\, with Z € {T,CT,F,FT,R,RT,PF,S,CS, RS,2S,PW,B}, by 

adding the clause \/ ieI <pj e £ y z if (pi e -C^for all i el to the clauses that define Xz/ replacing Xz 



by £y z in the other clauses, and making p 



V (pi iff there exists i e I with p |= a, 



Then, £ z 



Xz- 



Proof. It is interesting to observe that even if the result is valid for all the semantics, the 
reason behind is not the same as for bisimulation. In that case, we only need to apply 
the De Morgan laws to get the "definition" of V as a combination of -i and A. However, 
for the rest of the semantics we do not have negation as "constructor", but V distributes 
over A and the prefix operator (that is V a( pi = a V tyi)' while negation is never applied to a 
formula «p' € X z - Therefore, by floating to the top any V, using those distribution laws, a 
formula in £X becomes equivalent to a disjunction of formulas within the corresponding 



language Xz/ and the equivalence of both logics follows. 



□ 



As we will see in this section, each of our logics is defined by a set of rules and, as 
usual, only the formulas that can be obtained by finite application of these rules belong 
to the logics. One important feature of our approach is that instead of focusing on small 
sets of formulas characterizing each of the semantics, we somewhat follow the opposite 
approach by including all the formulas, from a certain family, that are preserved by each of 
the semantics. This choice has many interesting side effects. In particular, we will not need 
to look for adequate formulas reflecting the characteristics of each of the semantics, but 
instead pick up from our "repository" of possible formulas those that are preserved by the 
current semantics. Thus, we characterize each of the semantics by means of the formulas 
that "see" the kind of observations that define it. As a consequence, we know whether a 
semantics is coarser than another by checking whether the logic characterizing the former 
is included in the logic characterizing the latter. Moreover, by using a larger logic we may 
find a formula expressing some property that is preserved by the corresponding semantics, 
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while if we settle on a smaller logic we might need a collection of formulas to express a 
simple property. 

Formally speaking, for each semantics defined by a preorder < we have a language 
-C Q -Chm characterizing it: <p € £, iff ((p < q A p |= (p) implies q |= <p). However, it is 
not easy (nor specially illustrative) to capture the whole set of formulas characterizing the 
semantics. Instead, we will consider sufficiently large families defined in a simple way 
that provide natural characterizations of the different semantics and show the relationship 
between them so that, as stated above, whenever a semantics is finer than another, the logic 
characterizing the first will contain that for the latter. 

As will become clear when we introduce our new logical characterizations, Table [3] 
readily presents the features that allow us to classify the semantics in the spectrum in four 
categories: 

• Bisimulation semantics, characterized by HML, that is closed under negation (-■), 
so that the preorder defined is an equivalence (the bisimulation). The remaining se- 
mantics are defined by non-trivial preorders, i.e., the preorders are not equivalences 
and their logical characterizations are, of course, not closed under negation. 

• Simulation semantics (S, CS, RS, . . . ), characterized by branching observations, 
which will be reflected by the unrestricted use of the operator /\ in the formulas. 

• Linear semantics (T, F, R, . . . ), characterized by linear observations. We will get 
them by severely restricting the use of /\ and the use of the negation. 

• Deterministic branching semantics, corresponding to an intermediate class between 
branching and linear semantics, where determinism appears restricting the use of 
the operator f\ in combination with the prefix operator. The only semantics in this 
class in the classical spectrum is PW. 

As already happened in Sections [3] and [4] our unified logical semantics will provide an 
enlarged spectrum — Figure [HI In particular, we will show the logical characterization of 
revivals semantics, introduced by Roscoe in [48] and already axiomatized in [19]. 

6.1. A new logical characterization of the most popular semantics. Again, we start with 
the best known classical semantics, that is, those at the layer of ready simulation in the 
spectrum. All of them use in some way the set of formulas _£/ = {a~T | a e Act} that 
characterizes the initial offers of a process. In Section I&21 we will present the logics for the 
rest of the semantics in a unified way, remarking how they are obtained similarly to those 
in this section but working from the set -£n of formulas associated to the corresponding 
constraint N. 

We will prove the equivalence between each of our logics and the corresponding logical 
characterization defined by van Glabbeek, thus checking that our new logical characteri- 
zations are indeed correct. But one of the intended goals of our unification was to obtain 
direct and natural proofs. This will be illustrated in Section [7| by showing the equivalence 
between each of our logical semantics and the corresponding observational semantics of 
Section|H This will provide a new, single proof of their correctness without having to resort 
to the characterizations defined by van Glabbeek. 

Definition 6.3. Ready simulation semantics. We define the set of formulas £,' RS for ready 
simulation semantics by: 



• If a € Xi then o e £,' RS ; 

• if o e £.i then ->o g £C 



RS' 
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• if (pi € £' Rg for all i e I then f\ ieI <p, € £' RS ; 

• if (p e £' RS and a e Act then acp e £' RS . 

Ready trace semantics. We define the set of formulas £' for ready trace semantics by: 



• T 6 £' RT ; 



ifcpe £' RT and X lf X 2 Q £\ then {/\ aeXl aT A /\bex 2 -* T ) A <P e -Cri-; 



• if cp e X^ T and « 6 Act then a<p e X^ T . 



Failure trace semantics. We define the set of formulas £' FT for failure trace semantics by: 

• T e £' FT ; 

• if cp € Xp T and Xi C Xj then (AueXj """AT) A <p 6 Xp T ; 

• if <p e Xp T and a € Acf then acp e £' FT . 

Readiness semantics. We define the set of formulas £' R for readiness semantics by: 
. Te£> R ; 

• if Xx c £[ and X 2 C £J then (A fl6Xl aT A A be x 2 -*"0 e X^; 

• if <p e X^ and a e Act then a<p € £' R . 

Failures semantics. We define the set of formulas Xp for failures semantics by: 

• T € £' F ; 

• if Xx c X; then (A„ eXl -«T) e £' F , 

• if cp 6 £' F and fl 6 Act then acp e £' f . 

It is immediate that £' C Xb and hence ready simulation semantics is coarser than 
bisimulation equivalence. We also have £' F Q £' £' C X^ T , X^ Q £rt' -£'ft - ■^'rt aru ^ 
£' RT Q £' RS , which can be interpreted in a similar way Let us now focus our attention on the 
third rule of the definition of X^ s : the unrestricted use of conjunction corresponds to the 
branching nature of the semantics. Moreover, the two first rules allow to fix the set of offers 
of a process as /-simulations impose. By contrast, the linear semantics only allow the use of 
conjunction to join those simple formulas that fix the set of offers along a computation (in 
the case of the readies-based semantics), or their over-approximations (obtained by means 
of the negated formulas ->aT, in the case of the failures-based semantics). Finally, notice 
how these simple formulas can only be checked at the corresponding final state, for the 
two simpler coarser semantics. 

Now, for Z € {RS, RT, FT, R, F}, each of the logics £' z is a superset of the corresponding 
logic Xz defined in Table |3j To be precise, for FT and F we need to remove the syntactic 
sugar used by van Glabbeek as stated below. 

Remark 6.4. We have used in Section l4~2l X c to denote the complementary of a set, because 
previously in Definition 14.201 we used the classic over line notation to refer to closures of 
sets T C LGOn- However, since we will not need those closure operators anymore we 
prefer to used the classic notation referring the complement of a set X by X. 

Proposition 6.5. 

(1) £rs £ X^ s - 

(2) £rj Q £' rt 

(3) £' FT 2 desugared(£fj), where the desugaring function removes the syntactic sugar used in 

£ft- 

(4) £ R c_ £' R . 

(5) £' F 2 desugared(£f), where the desugaring function removes the syntactic sugar used in 
£ F . 
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Proof. Recall the definition of £z in Table HJ 

(1) To prove that Xrs £ -C' RS , it is sufficient to show that each formula cpx - A«ex flT A 
/\btx ~h^ corresponding to X c Act belongs to -C' RS . Both aT and -i)T are in X RS 
and the combination of these formulas with the operator A is also in the set £' . 
For the inclusion to be proper, it is sufficient to notice that the formula -ibT belongs 
to £' RS but not to the set £ R $. 

(2) To prove that £rj £ -C' RT it is sufficient to show that for every X C Act and any 
(p £ -Crt, the formula (/\ a ex aT A Afc^x ^bT) A cp belongs to £' RJ . Note that b i X 
is equivalent to b £ X, so taking Xi = X and X2 = X we have that the considered 
formula belongs to £' RT - To prove that £rt c -£rt' ^ * s sufficient to note that 
(-i&T) A <p belongs to £ RT , by taking Xi = and X2 = {b}, but it does not belong to 

£rs- 

(3) In this case the result is trivial, since the definitions of £ft and £' FT are almost the 
same, once the syntactic sugar is removed. The only difference is that J_€ £' FT , 
which obviously does not affect the inclusion. 

(4) To prove that £r Q £' r , it is sufficient to show that for every X C Act the formula 
A«ex flT A /\btx ~'^ T belongs to £' R . Note that the condition b & X is equivalent to 
b € X, so taking Xi = X and X2 = X we have that the considered formula belongs 
to £' R . To check that Xr £ X R , it is sufficient to note that the formula -i&T belongs 
to £f R by taking Xi = and X2 = [b], while it does not belong to Xr. 

(5) Analogous to 3. 

□ 

As stated earlier, in order to obtain more natural characterizations, our logics typically 
contain large sets of formulas. This is why in most cases our logics contain those proposed 
by van Glabbeek. In order to prove the equivalence between ours and his, we have to show 
that our additional formulas are in fact redundant and could be safely removed. 

Proposition 6.6. (1) £ RS ~ £' RS ; (2) £ RT ~ £' RT ; (3) £ FT ~ £' FT ; (4) £ R ~ £' R ; and (5) £ F ~ £' r 

Proof. 

(1) Any conjunction and negation of formulas in £1 can be obtained as the disjunction 
of the formulas X describing all the "compatible" offers. These are those including 
the positive and negative information in the corresponding conjunction, i.e., a~T ~ 
Vaex X; ->aT ~ Va£X ^- Then, by applying Proposition |6.2l we obtain £' RS ~ £ R $. 

(2) We have shown that the formulas in Xrt are particular cases of the formulas in £ RT - 
those that completely define the offers at the states along a computation (when we 
apply the second clause in the definition of £' RT with X2 = Xi). In contrast, our more 
general formulas (AflTeXj flT A AfcTex 2 ~^bT) A <p, where cp 6 £' RT , could provide us 
with some partial information, combining both positive information aT € Xi and 
negative information bT £ X2, which tells us that we are in an arbitrary state X 
satisfying Xi c X c X2. But we can replace these formulas by the disjunction of all 
the formulas describing any of these possible offers X. By repeating this procedure 
at each level of the formula, we finally obtain a disjunction of formulas in Xrt- To 
conclude, it is enough to apply Proposition l6.2l 

(3) We know _l_= -iT = V;e0 <Pi, and applying Proposition l6.2l we get the equivalence. 



UNIFYING THE LTBT SPECTRUM 47 



(4) Note that van Glabbeek allowed in Xr only "normal form" formulas from £' R , 
which can give us information about the offers at the final state in a computation 
(when we apply the second clause in the definition of -C' R ) or simply define these 
computations by means of the prefix operator (when we apply the third clause in the 
definition of £,' R ). However, our more general formulas (AareXi flT A Abrex 2 ~*bT) 
can also provide us with some partial information about the final state, which could 
be both positive a~T e Xi and negative bT e X2. In the (allowed) case Xi f] X2 + 
we have that the formula is unsatisfiable. Otherwise, we are offering the actions a 
corresponding to formulas aT in any Xc£j that satisfies Xi c X and X C X2, and 
we can replace again the corresponding formula by a disjunction of formulas in Xr. 

(5) Analogous to 3. 

□ 

In the following, when we consider a logic Xz and the index Z refers to some concrete 
semantics, as is the case with RS, RT, FT, R, and F above, by abuse of notation we will 
simply write E^ instead of E_£/ for the preorder induced by the logic £L. 

Theorem 6.7. 

(1) The logical semantics E' induced by the logic £,' is equivalent to the observational 
branching semantics defined by <£, generated by the set of branching general observations 
BGOj. 

(2) For Z e {F,FT,R,RT}, the logical semantics E^ induced by the logic £' z is equivalent to 

the observational linear semantics <. in Definitions \4.14\ and \4.19\ 

Proof. It is a consequence of Proposition 16.61 and the results by van Glabbeek collected in 
Table H TheoremHB and PropositionHH 

(1) We have already checked that our formulas are equivalent to van Glabbeek's: X' ~ 
-Crs- It is easy to show that once we have eliminated the unsatisfiable formulas in 
X' (those that simultaneously make two different offers, or perform an action that 
was not included in the corresponding offer) the remaining formulas in £' admit 
a normal form in the language Af (X^s), which we define as follows: 

• if X c Act, [m \i e 1} c X, and <p t e N(£ KS ), then (/\ beX bT A /\ HX ->bT) A 
AMdiCpieNiXfts); 

• if {flj I i e 1} C Act and cp; € N(£ K s) then /\ M atyi e N(£ K s)- 

Within this set, consider the subset of formulas CN(£<rs) which can be generated 
using the first clause in the above definition. We can establish an isomorphism 
between CN(£<rs) an d the set of possible branching general observations BGO/. 
Moreover, it is easy to prove that if for every formula <p 6 CN(£<rs) we define bgOp 
as the corresponding observation, then <p\=pift bgo^ 6 BGOi(p), from which it 
immediately follows that CA^(X^.s) characterizes the ready simulation semantics 
defined via BGOi. 

Now, to conclude the proof it is sufficient to show that NiJl^s) an d CA/ r (X«.s) 
are equivalent. Note that whenever we use the second clause in the definition 
of N(£%s), we are ignoring the possibility of specifying the offer X at the state 
we are. As a consequence, the offer could be any satisfying {a, | i e 1} C X, for 
the corresponding set {fl, | i e I}. Then we can complete the associated formula 
Am a m by adding the disjunction V{«,/fei}cx( Afcex bT A A^x "^T). Floating all the 
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disjunctions away we obtain a disjunction of formulas in N(£<rs), which ends the 

proof. 
(2) • If Z = RT, we know that £' RT ~ -Crt- It is easy to show that eliminating all 
the unsatisfiable formulas (those that simultaneously offer two different sets 
of actions, or perform an action a that is not included in the corresponding 
offer X) the rest of the formulas in £' RT admit a normal form in the language 
N(£<rt), which we define as follows: 

- if X C Act then (A b6X bT A /\ HX -.&T) e N(£kt); 

- if X c Act, a e X, and <p € N{£<rt) then (Abex bT A Ab?x ~^T) A acp e 

- t € N(£ KT y, 

- if a € Act and cp e N(£<rt) then acp e N(£<rt)- 

As we did for the case of ready simulation, we could define the corresponding 
language of complete formulas CN{£<rt)- The formulas in £' RJ that we ob- 
tained in the proof of Proposition l6.6[ for the case of RT, are indeed in CN(£<rt) 
because any subformula gives us some partial information about the offers at 
the corresponding state, which in the worst case could be empty. Therefore, 
when we translate this information into the language £' RT we obtain a dis- 
junction between complete formulas in CN{£<rt)- We can easily establish the 
isomorphism between CN(£<r?-) an d the domain LGOj, and then prove that 
for every formula <p e CN(£kt)> if we define IgOq, as the corresponding obser- 
vation, we have <p |= p iff IgOq, e LGOi(p). From here it follows that CN(£<rt) 
characterizes the ready simulation semantics defined via LGO\. To conclude 
the proof we need to show that N{£<rt) an d CN{£kt) are equivalent, which 
is analogous to N{£.<rs) an d CN{£>rs) above. 

• Z = FT. (=>) Let p and q be such that p E^ r q: we will show that p <? q. Given an 
observation XofliXi . . . a n X n € LGOi(p), we have a failure trace XofliXi . . . a n X n 
for the process p. Now, we consider the formulas cp„ - A„ e x _,flT '' <P* = 
A^-jF^flT A dj+icpi+i with i € 0..n — 1, and we have that p |= <po- Therefore 

q \= (pQ, which means that XofliXi . . . a n X n is a failure trace of q. Then, there is 
some Yo fl i^2 ■ • ■ a n Y n e LGOi(p) with Y; f| X, = for all i = 0..n or, equivalently, 
X; 2 Yj for all i = 0..n. As a result, LGOi(p) < 1 ^ LGOi(q), which means p <| 2 q. 
(<=) Let us suppose that for all XofliXi . . . a n X n € LGO\{p) there exists Yofli Y\ . . . 
a n Y n € LGOi(q) such that X, 2 Y, for all z = 0..n; we want to show that if p |= cp 
then zj |= <p, for all cp € X^ r . If p \= (p, we can decompose (p by means of a 
sequence of formulas, taking cp — cp n , cpi — /\ aeX t ~"2T A a^-i for i e l..n and 
cpo - /\aex° _,flT • Therefore, X n a n X n -\ . . . a\Xo is a failure trace for the process 
p, so there exists Z„a n Z„_i . . . ajZo £ LGOi(p) with Z, H X, = 0, and using that 
p <? <?, there exists some Y n a n Y„_i . . .a{YQ e LGOi(q) with Y, c Z,, so that 
Y, nX, = and then we get q\= <p n . 

• If Z = R, using the result in the proof of Proposition 16.61 for the case of R it is 
enough to show the result for the set of "normal form" formulas A/^(X«) defined 
by: ^ 

- if X c Act then (A tex bT A /\ b& -*T) 6 AT(Xr); 

- T g N(£ K ); 
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- a e Act and cp € N(£<r) then <p € N{Jjr). 
(=>) Let p and <? be such that p E R (7: we will show p <~ q. Given an obser- 
vation XofliXi . . .a n X n e LGOi(p), it corresponds to the readiness information 
01 . . . a„X„ of p. Now, we consider the formulas cp n = A«ex flT A Aagx "'flT; 
<Pj_i = 0{(pi with !€ 1 ... n — 1, and we have that p \= cpQ. Therefore q (= cpo/ 
and di ... a n X n is a readiness information of q and, as a consequence, there is an 

observation Y^a{Y 2 • ■ • a n Y n e LGOi(q) with Y„ - X n/ proving p <f q. 
(<=) Let us suppose that for all XofliXi . . .a n X n e LGOi(p) there exists some 
YofliYi . . .a n Y n € LGOi(q) such that X n = Y n . We want to show that if p \= cp 
then q \= cp for all cp e CN '(-C<r). If p \= cp, we can decompose cp taking 
(p = <pn, (Pi = am-\, for all 2 € l..n, and <p = Aaex p aT A /\a& ~" lT - Then 
we have that a n a n _\ . . . a{X^ is a readiness information of p, so there exists 
some Z n a n Z n -i . . .fliXo € LGOi(p), and some Y n a n Y n -\ . . .a\Yo e LGOi(q) with 
Yo = Xo, from which we conclude that q \= cp n . 

• Z = F. (=>) Let p and q be such that p C' ^: we will show p </~ <?. Given an ob- 
servation XofliXi . . . a n X n e LGOi(p), it generates a (maximal) failure «i . . . a n X n 
of the process p. Now, we consider the formulas cp n - A„ e x _,flT ^ <Pi+i = flf+i^i 
with z e 0..n - 1, and we have that p |= (po- Therefore, q (= (po/ so «i . . .a n X n 
is a failure information of ^, and there is some Yofli Y 2 . . .a n Y n € LGOi(q) with 

Y„ fl X,i = 0, or equivalently X„ 2 Y„, proving that p <f~ q. 
(<=) Let us suppose that for all XofliXi . . .a n X n e LGOi(p) there exists some 
Yofli Yi . . .a n Y n e LGOi(q) such that X„ 2 Y„. We want to show that if p \= cp then 
q \= cp for all <p e X F - If p \= cp, we can decompose cp taking <p = cp n , cpi = a{cpi-\, 
with i € l..n, and 90 = Aaex ""^T. From p |= cp we infer that a n a n -\ . . . fliXo is a 
failure information of the process p, so there exists Z n a n Z n _i . . . u\Zq e LGOi(p) 
with ZoH^o = 0/ an d then there is some Y n fl n Y n _i . . . «iYo € LGOj(q) with 
Y„ C Z„, so that Y„ p) X n = 0, obtaining q \= cp n . 

□ 

Example 6.8. Figure [13] shows a collection of examples to illustrate the differences between 
the semantics in the RS layer of the spectrum. All the following equivalences can be 
checked by taking any arbitrary formula from the logic defining each of the semantics. For 
readability, we omit the last T in all subformulas. Besides, ~x (resp. +x), where X is a set 
of indexes, represents any ~z (resp. +•£), with Z e X. 

• p 1 \£' F p 2 and p\ £' FT RT RS| p 2 because p\ |= aipb A -ic), but p 2 does not satisfy it. 

• P2 ~f P3, but p 2 £j R ^ FT| P3 and thus p 2 £j R7; RS| p$, since p 2 satisfies a(-<e A c) but p 3 
does not. 

• P3 ~(f,r) P4/butp3 ^ T P4 and thus p3 [£j RT rs| P4, because p 3 satisfies a(->c A b{-^e A d)) 
but p4 does not. 

• P5 ~{f, ft) P6, but p 5 £ R p 6 and thus p 5 £j R7; RSj p 6 , since p 5 satisfies ab(c A d) but p 6 
does not. 

• Pe ~{F, R, rt, ft) Pi but p-j \£' RS p6, because p-j satisfies a(bc A bd) but p(, does not. 



• 



P7 ~{F, R, RT, FT, RS) 
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Figure 13: A simple example to show the strength of the different logics 

6.2. Our new unified logical characterizations of the semantics. Inspired by the semantics 
studied in Section [67TJ next we define the general format for the logics characterizing each 
of the semantics in the spectrum. We start by enlarging the spectrum yet a bit more. 

Definition 6.9. 

(1) Universal semantics. We define the set £.' u of universal formulas that characterize 
the trivial semantics that identifies all the processes by £! u = {T}. 

(2) Complete semantics. We define the set £! c of complete formulas characterizing the 
semantics that only distinguishes the terminated processes from the non-terminated 
onesby£^ = {T,-.0}. 

(3) Initial offer semantics. We define the set _£j of initial offer formulas characterizing 
the semantics that only observers the set of initial actions of a process by Xj = 
{T,-.0} U{at | a e Act}. 

In the definition above the subformula -i0 is just syntactic sugar for the formula 
-i(/\aeAct ~ , flT). Therefore, once again all these new logics are sublogics of Xhm and, as 
a result, we do not need to define their semantics. 

Note that XJ is a bit larger than the logic £/ from Section 16.11 Once again, this is so 
in order to get a more uniform presentation of our logics: -i0 is indeed redundant. By 
including it we immediately obtain that the complete semantics is coarser than the initial 
offer semantics, because £! c C Xr. Based on this result we will also obtain that the complete 
simulation is coarser than the ready simulation. Certainly, -i0 is redundant in XJ (but not 
in JL'fS), because by means of it we can only distinguish a process that cannot execute any 
action from any other that can execute someone. But using the corresponding a~T formula 
we can also get that. 

6.2.1. The simulation semantics. As repeatedly noted, the family of simulation semantics 
constitute the spine of the new spectrum. All of them are defined in a homogeneous way 



UNIFYING THE LTBT SPECTRUM 51 



thanks to the notion of constrained simulation from |24 | . Next we present their logical 
characterization. 

Definition 6.10. Given a set of formulas £' N defining a semantics N, we define the set of 
formulas £' s that characterizes the N-constrained simulation semantics by: 

• If a e £' N then a e £' NS ; 

• if a e £' N then -kt £ £^ s ; 

• if (pi € X^ s for all i € J then /\ ieI (pj e £^ s ; 

• if <p e -C' NS and a e Acf then acp e £' m . 

Taking N £ {U,C,I} we obtain -C' us , -C' cs and £' IS , that we rewrite as £' s and X^ s in the 
first and last cases to emphasize the classic notation for simulation semantics. From £' s we 
obtain £' ss , that we will denote as £' 2S . To complete the collection of simulation semantics 
in the spectrum we need -C' TS , that will be based on £' T , to be defined in the next section. 

The definition above differs from the particular case of ready simulation in Defini- 
tion [63] in the two first rules, by means of which we impose that the process will traverse 
states which are in the corresponding N-equivalence class all along the tree of computations 
checked by a formula in £' NS - Note that the combination of positive and negated formulas 
allows us to shape each of these classes. Next we state the equivalence between our logics 
for the simulation semantics and those by van Glabbeek's recalled in Table [3] 

Proposition 6.11. (1) £' s ~ £ s ; (2) £' cs ~ £ C s; and (3) £' 2S ~ £ 2 s- 

Proof. 

(1) The clauses defining £' s and £$ produce the same set of formulas. The first two 
clauses in £' only add the two trivial formulas T and -iT because in £' - {T}. 

(2) Again, the sets of formulas produced by £' cs and £cs are the same because the 
two first clauses of L' cs can only generate T, -iT, and -i0 from £' c - {T, -iT}. is 
needed to reflect the second clause in the definition of £cs, while -if) = V ' a eAct flT so 
that any formula containing -i0 can be rewritten into a disjunction of formulas in 

-Ccs- 

(3) Once again, the sets generated by £' 2S and £ 2 s are the same. The clause "if a e £' s 
then a e £' 2S " in £' 2S does not generate any new formulas because £s Q £is (the 
formulas in Xs are exactly those that can be created using only the last two clauses 
in the definition of £is)- 

□ 

Remark 6.12. We can use both positive formulas in £' and their negations for defining 
£' cs due to the fact that C-constrained simulation can be built from the equivalence relation 
defined by C as constraint. However, we could also use E c as a constraint and then remove 
the clause "if o e £' c then o e £' s " , which generates -i0 e £$ c - The other clause, which 
generates € £' , is crucial and cannot be removed from the definition. These two facts 
also concur in the definition of the other simulation semantics in the extended spectrum, 
for which we also present a logical characterization including the two clauses above. 
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6.2.2. Logical characterization of the linear semantics. We start by defining the closure opera- 
tors by means of which we express the extent to which conjunction and negation can be 
used in the logical characterizations of each of the linear semantics. 

Definition 6.13. Given a logical set £,' N with N e {U,C,I, T, S), we define: 

(1) Its symmetric closure X^ by: if a e £' N then a e £f, and ->a G X^; if a, e X^ for all 
i£lthen/\ iel 0ie£=. 

(2) Its negative closure X^ by: if a € £' N then ->a G X^; if a, € £Z for all i G I then 

Aiel °i e -C>N- 

(3) Its positive closure X,^ by: if a € £' N then a € X^; if a, € X^ for all i G I then 

AieZ Oi G X^J. 

Remark 6.14. Obviously these closures make sense for any given logic X, but we prefer to 
restrict our attention to £' N since it will be enough for our goal and gives rise to a simpler 
notation. 

Whenever we have a bag of "good" properties (such as £,' N above), to assert by means 
of a single formula which is the subset of properties that a certain element satisfies it is not 
enough to assert that it satisfies each of them: we also need to assert that it does not satisfy 
any of the rest. This is why we need formulas in the symmetric closure. By contrast, if the 
only available formulas belong to the negative (resp. positive) closure, we can only assert 
that the element has at most (resp. at least) the enumerated properties. Next we present 
the unified logics for all the linear semantics in the spectrum. 

Definition 6.15. Inspired by the orders <L, <B, <^, and <l,~, we define the set of formulas 
X' , , X' /2 , X' t f, and X' ;/2 , respectively, by means of the rules: 

(1) • T G £' ; 

• if (p G X' , and a e X^ then a A <p G X' , ; 

-N -N 

• if <p e X' , and a e Act then acp e X' , . 

-N -N 

(2) . T G £' ; 

% 

• if <p G X' l2 and o G X^ then o A <p G X' , 2 ; 

— N 

• if <p G X' D and a G Act then acp e Xf l 

(3) »tgX'; 



^N 



• if a G X^ then a G X' (/ ; 

-N 

• if <p G X' (/ and a G Act then a<p e X' r/ ■ 

-N % 



(4) .TGX', 



-N 

• if a G X^ then a G X' , /2 ; 

-N 

• if <p G X' , /2 and a e Act then acp e X' , /2 

-N ~N 



Note that for the coarsest semantics (i.e. those corresponding to plain refusals and 
plain readiness when N — I) we only check for N at the "end" of the formula because 
there are no conjunctions in the corresponding languages X' , f and X' , /2 , except for those 
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stemming from the corresponding closures £^ and £j\. The other two logics do introduce 
additional conjunctions that allow to observe N along the computations. 

We have used the negative and symmetric closures for the "failures-based" and"readies- 
based" semantics, and we can use the positive closure to define two new semantics that 
have not been considered earlier in this paper, nor elsewhere as far as we know. For that 
we need to observe partial offers along a computation, or just at its end, where X is a partial 
offer of p if X c I(p). It is clear the duality with respect to the failures semantics, where F 
is a failure of p if l(p) C F. We can introduce these two new semantics at each layer of the 
spectrum through the corresponding partial offers for each N e {U,C,I, T, S}. 

Definition 6.16. 

(1) The semantics of partial offer traces for the constraint N is that defined by the logic 
£' with: 

• T e £' <lc ; 

• if <p e £' fe and o e £^ then o A <p e £' (c ; 

-N N 

• if <p € X' ,c and a e Act then acp e £' te . 






-N 



(2) The semantics of partial offers for the constraint N is that defined by the logic £' 
with: 

-N 

• if a £ £^j then a e £' lfQ ; 

-N 

• if cp e £! lfc and a e Act then acp e £,' //c . 

Duality between failures and partial offers causes the picture of the complete layer of 
linear semantics for each N to become two diamonds that share the side corresponding to 
the readies-based semantics. Now, recalling Theorem |6.7[ 

Proposition 6.17. 

(1) -C' F and £! //c are incomparable: p <j~ q does not imply p <j q and p <j~ q does not 



imply p <l~ q. 

-I 



(2) £' FT and £! te are incomparable: p <r q does not imply p <| Q q and p <; s q does not imply 



Proof In fact, we have a stronger result by combining these two statements: if we consider 

p = ab + ac, q = a(b + c), and r = p + q, then p -j 2 r but r £j~ p, and q =! £ r but r ^ 7 q. □ 

Similar counterexamples exist for N € {T, S}. However, for N e {U, C}, which produce 
the trace and the completed trace semantics, respectively, it is easy to prove that the six 
logics of the layer are equivalent. 

Proposition 6.18. 

\1J -L ,f — -L i — -L (2 — -L ; s — -L ,f 2 — -i, ,f S — -Lt 

-u -U s u s u ^ u ^ u 

(2) £' = £' = £' - £' - £' = £' = £rr 

-c -c s c s c ^ c "C 
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Proof. 

(1) Trivial, since the sets of clauses defining X' „ and Xr are almost the same. Note 

-u 

that the clause "if a e Xj then a e X' " does not give rise to new formulas because 

£u = m 

(2) Note that the sets of clauses defining X' lf3 and Xcr are the same but for the clause 

-c 
"if a e X^ then a € X' ". On the one hand, this causes -iT e X' //2 (which adds 

-c -c 

nothing) because T e X^ and thus -iT € X^. On the other hand, we also have 

□ 



£ X' //2 because -i0 € X^ and then — i— 10 e X^. 

-c 



Corollary 6.19. X' (/ ~ Xr and X' /p ~ Xcr- 
-u -c 



An interesting result illustrating the generality of our characterizations concerns one of 
the finest semantics in the classic spectrum: possible futures. Possible futures is located in 
Figured] below 2-nested simulation because the more accurate trace simulation semantics 
was not yet included in the spectrum; this is corrected in the spectrum in FigurelTT] Indeed, 
for N — T we have the following result. 

Proposition 6.20. X' ;/ = Xpp. 

-T 

Proof. Trivial, since the sets of clauses defining X' lf and £pf are almost the same: our 

-T 

definition includes the clause "T € X' ,/', which does not appear explicitly in that of -Cpp 

-T 

because it corresponds to the conjunction of an empty set of formulas. □ 

Corollary 6.21. £' ~ £ PF . 



6.2.3. Logical characterization of the deterministic branching semantics. Now we consider the 
deterministic branching semantics. In the classic spectrum the only such semantics is 
possible worlds but, as we pointed out before, there is one such semantics at each layer of 
the extended spectrum. 

In order to capture determinism we need to consider conjunctive formulas to express 
the desired branching, but only when it corresponds to a choice between different actions. 
This leads us to the following scheme: 



if X c Act and (p a £ Xd n for all ae X, then A acp a e Xd n - 



aeX 



Definition 6.22. For each N € {U, C, I, T, SI, we define the formulas of X' n by: 

• if <p 6 £f D and o e X^ then o A <p € £' D ; 

• if X c Act and <p a e £' D for all a e X then A«ex a( Pa € -C' D ■ 

For N = I we obtain the unified logical characterization of the possible worlds seman- 
tics. 
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-.T = X 6 £' N 


V 
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r 


V 


V 


V 


-o e r„ 




• 


• 


V 


V 


V 


a 6 Act => at e X^ 






• 


V 


V 


V 


<p e XJy, h g Act => 
ay e £' v 








• 


• 


• 


<p, e X^ Vi e I => 
Aiei <P; e -Civ 










• 


• 














• 



Table 4: Logical characterizations of the semantics used as constraints. 

Proposition 6.23. £,' D 2 -Cpn- 

Proof. Analogous to the case of ready simulation semantics. □ 

Proposition 6.24. £! D + JLpw- 

Proof. This is a consequence of the fact that the original logical characterization of the 
possible worlds semantics, £pw, was wrong. For instance, taking p - abc + a(bc + d) + ab and 
q - a(bc + d) + ab then p £pjy cj but p ~£ PW q, since £,pw cannot "observe" the intermediate 
offer that makes the possible world abc different from those of q. By contrast, the formula 
<p - a(-id A be) € £! D is enough to distinguish p and q, since p \= (p and q ^ (p. □ 

We postpone to Section [7| the proof of the equivalence between our observational 
and logical characterizations of the possible worlds semantics. As a consequence of this 
correspondence, we have that a logical characterization only works in the infinite case if 
we restrict ourselves to image-finite processes. 

In Tables[4]and[__]we present our results in a three-dimensional way. Table|5]shows the 
rules defining the logics characterizing each of the semantics at each layer of the spectrum. 
On top of it also appears, as example, the classic notation for the corresponding semantics 
represented when N = I. Table |4] contains the logics that characterize the constraint 
governing each of these layers. There are two semantics that are included in both tables, in 
order to emphasize their double role as "main" and "auxiliary" semantics. However they 
are disguised under different names: this is the case of T - <!, (in fact, it is also equal to 
the other three linear U-semantics) and S = US. 
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Table 5: Our new logical characterizations for the semantics at each level of the spectrum. 



7. Relating the unified logics and the unified observational model 

In this section we will relate our unified logical characterizations and the unified observa- 
tional semantics. As indicated in Section |2j we have to restrict ourselves to image-finite 
processes; as a byproduct, the finite parts of each of the corresponding languages, that are 

obtained by intersection with -C HM , provide us with a pure finite logical characterization 
of the semantics. However, it is convenient in the first part of this Section to consider still 
the full (infinitary) logic characterizing each of the semantics. 

Definition 7.1 (Normal formulas N(£,)). 

(1) Given a set of formulas _£ whose outermost operator is not conjunction, the set 
N(-C) of induced normal formulas is defined by: 

• t e //(£); 

• if Ti,T 2 £ £,{«; I i e J} C Act, and <p,- e N{£), then (A fferi o A Aaer 2 ^) A 
/\ jeI ai(pieN(£). 

(2) For each N e {U, C, I, T, S} and each J/„ e {NS, < l N , <g, <£, < l jf, <j=, <Jf / D N } in the 
spectrum, we define the set of normal formulas Ny N (IL'L) Q -C'y as Ny N {£'!,) = 
N {£.'!,) P| -C'y / where X^ is the set of formulas in £,' whose outermost operator is 



not conjunction. 

Remark 7.2. The clause in Definition 17. Il l is more involved than it appears. Initially, we 
can apply it with I = to obtain the first (non-trivial) normal formulas and then recursively 
to obtain more complex normal formulas; note that the two first subformulas stem always 
from the original set £,. By abuse of notation, when some of the elements in our normal 
formulas do not appear in the corresponding set £! y , we assume that these formulas have 
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been extended by conjunction with T using the fact that Aaefl ° i s another syntactic form 
to express T. 

Also note that infinite conjunction is allowed in the two first subformulas. As a 
consequence, if we consider the tree-like form of these (possibly infinitary) formulas they 
could have infinite depth. However, if we define the normal depth of formulas in Af (-Cjv) 
as that obtained by counting the recursive nesting in the application of Definition 1 7. 1[ then 
any normal formula has finite normal depth, and the set they form can be explored by 
structural induction. 

Theorem 7.3. Each set of normal formulas N\/ N (£'!,) associated to the semantics in the spectrum 
is equivalent to the full set of formulas £' . 

Proof. By structural induction, all the formulas in £' admit a normal formula in the sense 
of Definition 17.11 that is obtained by gathering the subformulas and applying Proposi- 
tioniH D 



• 



Definition 7.4. The set of complete normal formulas CN(£) (resp., the set of complete normal 
formulas associated to each semantics in the spectrum, CNy N (£'L)) is the set of normal 
formulas (resp., the set of normal formulas associated to each semantics in the spectrum) 
for which the rule in Definition [7j] is applied with Y2 — Ti- 

Now we prove that infinite conjunction in Definition [7j] can be approximated by finite 
conjunction. 

Theorem 7.5. If we restrict ourselves to image-finite processes, for each denumerable set of formulas 
£, any complete normal formula cp e CN{£) can be approximated by a set of finite normal formulas 
{<p k I k € IN} that only use finite conjunction, that is, p\= <p iffp |= cp k for all k e IN". 

Proof. We define the sequence (p k by structural induction on the normal depth of <p: 

<p = (Aaerj ° A A ff6 f~ ~' a )- We consider a fixed enumeration of the set £ = {o„ \ n e 
IN}, and define £<" = [oj e£\j^n}. Then, for each A: E IN: 

<p k = A aA A ^°- 

We have p \= (p o (p |= a Va e Ti and p ^ a Va £ T\) and p (= cp k Vk e IN o 
(p |= Va € Ti n £** k and p |£ a Va € 1^ n £ <k ) and the result follows from a the 
equality 

r 1 = r 1 n£ = r 1 n(yxn 

faElN 

<P = (AaeT-i ° A A^f -- " 7 ) A /\ ieI ai(pi. By structural induction we can assume that 
the result is true for any subformula <p;. Then we define (p k - AoeTinC 4 * ° A 
A a eT\n£<k ~" 7 A AieJ fl *'<Pr Now ' if we decompose cp as <pj A (p J7 (taking <p 7I = Aier «i<P»/ 
and analogously for the set of approximations) we have that p |= cp iff p (= cpj 
and p (= <p^. If p \= cp k then p |= <p* for all fc € IN and arguing as in the base case 
above we conclude that p (= cp 7 . Any image-finite process p can be decomposed as 

P = HaieAct ^"=1 #V-' ana - we have p |= <p^ iff for all i there exists j with fl, = a^ and 
pi (= <p^. Then, if p |= <p^ for all k e IN, for each i there exists some j e l..m, such that 
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Figure 14: A branching observation. 

pi \= cp k for infinitely many k, but this means that pi (= <p k for all A: € IN and then, by 
the induction hypothesis, pi \- cp; thus getting p \- <p. 

□ 

Definition 7.6. For each N e {U,C,I,T,S} and each V N e {NS, < l N , <g, <£, <!ff, <£, <Jf , 
Djv} in the spectrum, we define the finite logic for the semantics £,{. as Xy n -C HM - 

Corollary 7.7. For each N e {U,C,I, T, S} and each M N e {NS, <> N , <j=, <JJ, <^, <g, <■$", D h 

rf 



-N'-N'-N'-N '-N'-N ' '- JN > 

in the spectrum, if we restrict ourselves to the set of image-finite processes we have Jj ~ £! 



~y N *-y. 



N 



Proof. We only need to apply Theorem |7.5l The only non trivial case is when N — S, where 
we have to apply twice the Theorem, using also the fact that CN(Xg ) ~ CN(£, S ), because 

j% ~ 4- □ 

Theorem 7.8. For each N e {U, C,I,T,S} and each }J N e {NS, < l N , <g, <{J, <JJ 2 , <g, <JJ S , D N } in 
the spectrum there exists a correspondence between the set of complete normal formulas CNy N (-C.'!,) 
and the corresponding domain of observations QGCV with Q £ {B,L}. This correspondence «-> 
satisfies that <p <-> 6 implies that (p\-cpiff6e QGCv(/?))- Moreover: 

(1) The set of complete normal formulas CNns(-£-'L) (resp. CNo N (-L'L)) and the domain of 
branching general observations BGOn (resp. dBGO^i) are isomorphic, that is, <-> is one to 
one. 

(2) The set of complete normal formulas CN K i (X'/,), CN K a (JL'L) and the domain of linear 

general observations LGOn are isomorphic, that is, «-» is one to one. 

(3) The set of complete normal formulas CN if {£!{,) (resp. CN ;/a(X'/,)) and the quotient 

domain LGO^/jf (resp. LGO^/jf^) are isomorphic, that is, <-> _1 is injective and <p <-> 9 

~N ~N 

iff 6 =*fr 6 (p, for some adequate Q v . 

Proof. 

(1) As can be seen in Figure HH a branching observation is a labeled tree whose nodes 
are local observations and whose arcs are labeled by actions. 

The general form of any complete normal formula in CNms(-Cn) is (Aaer a A 
Aaff"" 7 ) A f\iei a i<Pi, witn <pi e CNus(-Cn) for all i 6 I. Since the language £' N 
characterizes the semantics used to get the local observations, we can associate 
to each complete formula (Aaer a A A^r _,a ) the corresponding local observation 
/ € Ljv- Then, by structural induction, we obtain the observation associated to each 
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formula <p, e CNs/s(-Cn)> thus getting the branching general observation BGOsi 
associated to the given formula. It is easy to see that this correspondence is indeed 
a bijection. 

The case for CA/£> w (Xjv) is analogous, but now it is not allowed to have repeated 
actions in the arcs leaving any node of an observation; this is obviously reflected in 
the form of the formulas in the corresponding language. 

(2) The case for CN K i (-£//) is similar to the previous one, but now the obtained (de- 

— N 

generated) tree is just a single branch corresponding to a Igo in LGOjv- 

For CA/ , < q(X//) the general form of a complete normal formula is (p - (T A 

— N 

Affgr ~<o) A a<p' r with <p' e CAA^aC-Cw). If we close the set T by derivability obtaining 

— N 

P and then consider its complement P, we can consider the local observation I 
that satisfies all the formulas in P and none in P. The linear general observation 
Igo corresponding to <p is then recursively defined as (I, {(a, Igo')}) where Igo' is the 
linear general observation corresponding to (p' . 

To proceed in the opposite direction, we just need to take as T the complement of 
the set of formulas in £' N satisfied by the local observation / at the root of the given 
LGOm, and then proceed in a recursive way. 

(3) In this case, the general form of a complete normal formula in CN if (XL si) is <p - 

-N 

TA«i(. . . (T Aa n -i(T Aa n (/\ aeT a A Aa^r - " 7 )- • ■)• Now we establish a correspondence 
between the set of local observations Ljy and the sets T C Xn as done in cases (1) 
and (2) above, and then define the correspondence <-> by ignoring the values of 
all the intermediate local observations in the considered Igo, keeping only the local 
observation at the end. 

For CN jp. (-Cm) we j us t need to apply the same procedure above combined with 

-N 

the ideas along the proof for CN '^(XLsi)- 

□ 

Remark 7.9. It came as a surprise to notice that the Igo's in LGOn are in a bijective relation 
both with the complete normal formulas in AC/ (Xsi) and those in ACo (XL si), so let us con- 

-N ~N 

sider the case N - I to explain this fact. A cnf in A/ r <;(Xj) specifies the corresponding local 
observation I(p) C P(Act) by means of a formula (Acer ° A Aa^r _ ' CJ )/ where the formulas 
in T are just the elements of the corresponding set I(p) while those in T correspond to its 
complement. When considering the failure trace semantics, the formulas in A/<;2(-£r) only 

contain the part Acr^r ~^° corresponding to the complement I(p). Since in this case the sets of 
Igo's could be assumed to be closed with respect to the order <J^ in Definition |4.19t sound- 
ness is retained after "assuming" that any formula A ff ^r '~" J "generates" the observation 
associated to T, even though some of the formulas a 6 T may not be satisfied when the cor- 
responding I(p) is smaller. But for the failures and failure trace semantics we can proceed 
by closing the set of offers upwards with respect to C and no new failure is introduced. 

Theorem 7.10. For each Ne{U,C,I, T, S} and each }/ N e {NS, < l N , <{= < l [ < l p , <^, <Jf , D N } 



-N'-N'-N'-N '-N'-N 
-f 

-f 



in the spectrum, if we restrict ourselves to image-finite processes, the logical semantics e{. induced 



by the logic £,L , is equivalent to the corresponding observational semantics in Definitions \4.2\\4.1l\ 
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and \4.32\ In order to unify our notation, here we will denote by GOn the corresponding semantic 
domain. 

Proof. By Theorem 17.31 £,' ~ Ny N (£,u)> an d from Theorem 17.81 we get the isomorphism 
between the set CJVy w (Xyv) and the corresponding set of general observations GOn- 

To finish the proof, we just need to show that A/V, (-Cn) and CNy N (-Cm) are equivalent. 
Any consistent formula in Ny N {£.x) (Ti f] Y 2 - 0) provides only some partial information 
about the states in a computation, so that the concrete values of these states are characterized 
by a set Y with Ti c T c Y 2 - Therefore, we can replace Y\ and Y 2 by Y and Y, respectively, 
adding the disjunction over all the possible values of T, to characterize the set of processes 
specified by the formula. Now it is enough to float the disjunction up to obtain a disjunction 
of formulas in CJVy w (-Cw), and applying Proposition 16.21 we get the equivalence between 
the two sets of formulas. Finally, we only need to apply Corollary [72] to conclude. □ 

Corollary 7.11. 

(1) The unified logical semantics in Definition ^. 10\ is equivalent to the N-simulation semantics. 

(2) The unified logical semantics in Definition ^. 15\ 1 is equivalent to the N-ready trace seman- 
tics. 

(3) The unified logical semantics in Definition \6.15\ 2 is equivalent to the N-failure trace se- 
mantics. 

(4) The unified logical semantics in Definition ^. 15\ 3 is equivalent to the N-readiness semantics. 

(5) The unified logical semantics in Definition ^. 15\ 4 is equivalent to the N-failure semantics. 

(6) The unified logical semantics in Definition ^. 22\ is equivalent to the N -deterministic branched 
semantics. 

Moreover, if we restrict ourselves to image-finite processes we have also an equivalence with the 
corresponding finite logical semantics. 

Proof. Since it was proved in Section |4] that any observational semantics characterizes the 
corresponding (classical) semantics in the (extended) ltbt spectrum, the desired equivalence 
between our (unified) logical characterizations and the classical semantics is an immediate 
corollary. □ 

8. On the real diamond structure 

This section is a practical proof of the suitability of our unification work. Some recently 
proposed semantics that were not in the original ltbt spectrum are nicely included in our 
extended spectrum, which shows why and how the old spectrum has to be expanded. 
Our unified approach immediately absorbs these new semantics and the results about the 
different characterizations are easily extended to cover them. We warmly thank Roscoe for 
pointing out to us his work on the stable revivals semantics (46ll48| , where an endeavor for 
an adequate presentation of the notion of responsiveness for a CSP-like language is made. 
(Responsiveness had been previously studied by Fournet et al. in (27] for CCS, under the 
name of stuck-freeness.) 

When faced with the diamond shape of the collection of linear semantics that are 
associated to each simulation semantics in the extended spectrum, it would be natural to 
expect it to reflect the structure of a lattice. Then, failure semantics would be the greatest 
lower bound of the readiness and failure trace semantics, while ready trace semantics 
would be the corresponding lowest upper bound. However, both intuitions turn out to be 
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wrong and a new semantics finer than failures and another one coarser than ready trace 
can be found: together with readiness and failure trace, they do constitute a lattice. 

Let us first consider the case of the lowest upper bound. We postulate that the axiom- 
atization of the associated semantics is obtained by instantiating our general axiom with 
the conjunction of the two conditions Mr and Mft- 

MR A FT(x,y,w) <=> I(x) 2 I(y) and I(w) C l(y). 

We denote with Craft the order axiomatized by the corresponding axiom (ND RaFT ). 

Definition 8.1. The readiness and failure trace semantics, or join semantics R A FT, is that 
defined by the order Eraft generated by the set of axioms {B1-B4, (RS), (ND RaFT )}. 

Proposition 8.2. The ready trace semantics is strictly finer than the readiness and failure trace 
semantics. 

Proof. Ert c Eraft is an immediate consequence of Proposition 13.21 and the fact that 
condition Mrt implies both Mr and Mft, and hence also Mr a ft- To show that Ert £ Eraft/ 
let us take w = 0, y - b, and x - bB' + c; then we have: 

a(bB + bB' + c) Eraft a(bB' + c) + abB 



v 9 

but, if I{B)±I{B'), 

a(bB + bB' + c) g RT a(bB' + c) + abB 
because {a}a{b, c)bl(B) e ReadyTraces(p) \ ReadyTraces(q). □ 

It is clear that the readiness and failure trace semantics is finer than both the readiness 
and the failure trace semantics; to show that it is actually the coarsest upper bound we need 
to prove that Eraft = Er n Eft- Even if the axiom (ND RAFT ) was created with this goal 
in mind, this cannot be easily shown using only algebraic arguments. Instead, it is trivial 
to obtain the observational characterization of the desired semantics by gathering together 
the failure trace and the ready observations. Based on Definition 14.191 we can define the 

corresponding order <^ ' by taking 

T <J A/ T' <=> T <g 7" and T < }J T' . 

A direct characterization can be obtained as follows. We combine both kinds of obser- 
vations into a single family of decorated traces that we call failure trace with final ready sets, 
by considering failure sets all along the trace except at the end of it, where we introduce 
the corresponding ready set. 

Definition 8.3. We define the order <^ by 

T <J A/ T' ^> for all X fli ...X n eT there is some Y a 1 ...Y n eT' 
with X n = Y n and X, 2 Y,, for i e 0..n - 1. 

Proposition 8.4. The semantics defined by the order Eraft coincides with that defined by <f 
and is thus the lowest upper bound of the readiness and failure trace semantics. 

Proof. Similar to that of Theorem |5.4[ □ 
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Let us finally consider the logical characterization of this semantics. It is clear that 
the conjunction of two semantics should be characterized in a logical way by simply 
considering the union of the logics that characterize both semantics (although there could 
possibly be a more compact presentation). 

Definition 8.5. We define the set of formulas £ iaA/ as that generated by the clauses: 



• T e £' Uv 

! 

"' anrl rr <= T -1 tVion n A m (= C 



< DA/' 



-; 
if <p e £ /=A/ and o e £^ then a hep e £ l 



• if a e £j then a e £ !2A/ ; 

• if <p € £ QA/ and a e Act then acp e £ !2A/ . 

Proposition 8.6. The logical semantics E' l3A , induced by the logic £' /2A/ is equivalent to the 

observational semantics defined by <f . 

Proof. We just need to check that £ /2A/ = £' te U £ lf , which is immediate. □ 

By replacing the I above by the generic N, we get the definitions and results for the 
general case. 

The axiomatic characterization of the greatest lower bound of the readiness and failure 
trace semantics is much simpler: we simply put together the axioms for the orders defining 
both semantics. 

Definition 8.7. The meet semantics R V FT is that defined by the order Ervft generated by 
the set of axioms {Bi-B 4/ (RS), (ND R ), (ND FT )}. 

If we define Mr v ft as Mr V Mft, that is, Mrvft(x, y, w) holds if I(x) 2 I(y) or l(w) c I(y), 
we have the following characterization of Ervft- 

Proposition 8.8. The order Ervft is that generated by the set of axioms {B1-B4, (RS), (ND RvFT )}, 
where (ND RyFT ) is the instantiation of the generic axiom (ND) with the condition Mrvft- 

Proposition 8.9. The semantics defined by the order Ervft is the finest semantics that is coarser 
than both the readiness and the failure trace semantics. 

Proof. Obvious since any semantics coarser than the readiness semantics has to satisfy 
{B1-B4, (RS), (ND R )}, any one coarser than failure trace must satisfy {B1-B4, (RS), (ND FT )}, 
and Mrvft is equivalent to Mr V Mft- □ 

Once again, the semantics defined by iz RvFT is not included in the ltbt spectrum and 
neither in our extended one; in particular, it is different from the failures semantics. To 
prove this fact we make essential use of the notion of revival, as defined by Reed, Roscoe, 
and Sinclair [46] . Revivals are sequences a,\, . . . , a n (X, a) where a\, . . . , a n is a trace of the 
corresponding process after which the action a is offered, but the set of actions X is refused. 

Proposition 8.10. The meet semantics R V FT is strictly finer than failure semantics. 

Proof. The inclusion c RvFT Cj E F is obvious since failures semantics is coarser than both the 
readiness and the failure trace semantics. To show that the inclusion is strict, note that any 
two processes related by c Rvf T do not only have the same failures but also the same revivals. 
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This is indeed the case since all the axioms u < v in {B1-B4, (RS), (ND R ), (ND FT )} preserve 
the revivals, which means Revivals(a(u)) c Revivals (a (v)) for every ground substitution a, 
and the revivals order is a precongruence for the operators in BCCSP. For instance, for 
(ND FT ) we need to prove that Revivals (o(a(x + y))) C Revivals(a(ax)) U Revivals(a(a(y + zv))) 
whenever l(a(w)) C I(o(x)). It is clear that the only non-trivial case occurs when a(X, b) € 
Revivals(o(a(x + y))); then we have (X, b) e Revivals(o(x + y)) so that X e Failures(o(x)) Pi 
Failures(o(y)) and b e I(a(X)) or b e I(a(y)). In the first case, a(X,b) e Revivals(o(ax)) 
whereas, in the second, X e Failures(a(x + y)) and therefore a(X,b) e Revivals(o(a(x + y))). 
The case for (ND R ) is simpler. Once we know that c RvfT preserves the revivals we only 
need to observe that the revivals cannot be obtained from the failures of a process. In 
particular, we have abcf a + a(b + c), but a({c\, b) e Revivals(ab) \ Revivals(a + a(b + c)). □ 

Next we present the characterization of the revivals semantics in terms of our obser- 
vational framework. 

Definition 8.11. We define the order <^ by 
T < jj v/ T' <^> for all X a 1 ...X n eT 



there is {Y fli Y x . . . Y' n \ j e J} C T such that X„ = U/e/ Y n- 



/2V/ 



Proposition 8.12. For all p,q e BCCSP, Revivals(p) c Revivals{q) if and only ifLGOi(p) <j 
LGOi(q). 

Proof. Note that < ~ can be equivalently defined as 

T <f vf T' ^^ for all X fli . . . X„ £ T and for all a e X n 

there is Yofli ...Y„eT' with a e Y„ and Y„ c X„. 

Now, since fli . . . a n {X,a) e Revivals(p) if and only if there exists Xofli . . . X n e LGOi(p) such 
that a e X n and X n nX = 0, we obtain the desired characterization. □ 

— 2V/ 

Definition 8.13. Given 7" c LGOm, T is defined as 

r 3V/ = {X fli . . . X n | there is {Y fli . . . y£ | ;' 6 J] C T with X„ = M Y^}. 

This clearly indicates that < ~ is in between <• ~, defining the failures semantics, and 

</ , defining readiness semantics. This is useful for the proof of the axiomatic characteri- 
zation of the revivals semantics. 

Theorem 8.14. The revivals semantics defined by C f is axiomatized by {B\ -B4, (RS), (ND RvFT )}. 

Proof sketch. It is quite similar to that of Theorem 15.41 for the case of failures semantics and, 
hence, also similar to the characterization of that semantics by means of acceptance trees 
[30J (and where the closure of the set of offers with respect to both union and convex closure 
is a critical argument), and this is why we only sketch it. In connection to that, recall that 
the application of the particular case of (ND) corresponding to (ND FT ) allowed us to join 
arbitrary states after the same trace, while that corresponding to (ND ) allowed us to obtain 
a common continuation after the same action at any state reachable by the same trace. All 
this can be done now using (ND RyFT ); however, we cannot add to an arbitrary state an 
action offered at another state reachable by the same trace since to do that we needed the 
unlimited strength of axiom (ND). □ 
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Note that for the join semantics R A FT the logical approach was the most direct way 
of defining it, whereas its equational characterization needed more care. For the meet 
semantics R V FT, the situation is just the opposite. As we have seen, R V FT is axiomatized 
by putting together the axioms for R and those for FT; in contrast, the logic characterizing 
R V FT is obtained by cleverly selecting the common part of the logics characterizing both 
R and FT. If we had defined the logical semantics by considering all the formulas from 
HML that are preserved by each semantics, then we could take the intersection of these 
sets as the logical semantics of any meet semantics. Since we defined our logical semantics 
by considering only a "basis" that generates the corresponding full set, we cannot simply 
take their intersection. 

Definition 8.15. We define the set of formulas £! /2V/ as that generated by the clauses: 

• T 6 £' <mf ; 

• if a, Gj e XJ for all j e J then (a A /\;- e j " l °j T ) £ -£<<2v/; 

• if <p e £.' /2V/ and a e Act then acp e _£' /2V/ . 

Note that in the second clause of this definition we have relaxed the condition in the 
definition of £' R by considering an arbitrary failure (that defined by the set /), but only 
a positive offer (the action appearing in a). This is how the revivals semantics becomes 
slightly finer than the failures semantics. 

Proposition 8.16. The logical semantics C' tev , induced by the logic £,' , 2V , is equivalent to the 

observational semantics defined by <f . 

Proof. In this case we have taken £! l2Vf = £J J3 D £! «. Then, to prove that it defines R V FT 

it is enough to check that p £f q implies that there exists <p in _£' Dv/ such that p \= <p and 
q ^ (p, which is almost immediate. □ 

Again, by replacing the I above by the generic N, we get the definitions and results for 
the general case. 

We can generalize most of the results obtained for the refusal semantics when N — I 
to any reasonable local observation function such as T or S, once we interpret C as the 
corresponding order and = as the induced equivalence. However, in order to define the 
adequate observational characterization of the revivals semantics for a local observation (or 
constraint) N, we should look for the adequate "elements" of the universe of observations. 
This leads us to traces when N is T , but it is not so clear how to define those "elements" for 
a non-extensional semantics such as that obtained when N is S. 

Let us conclude this section with a look at the picture in Figure [15] showing the real 
structure of the full (bidimensional!) diamond, that should be included in all the upper 
levels of the extended ltbt spectrum. 
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Figure 15: The real diamond below ready simulation. 



9. Operational semantics 

In this section we explain how to develop the semantics in the spectrum in an operational 
way. Certainly this presentation could be argued to be ad-hoc at times since some "high- 
level" conditions are required in the SOS-like rules for some of the semantics. Moreover, 
the style of presentation at this Section is certainly less precise and detailed than in the 
previous ones. However, we believe it still provides some additional insight on the common 
properties of the semantics and also establishes a connection with our previous work 
on (bi)simulations up-to |23l 125] as a way to get coinductive characterizations of any 
"reasonable" process semantics. 

Structural operational semantics was introduced by G. Plotkin in 1981, even though 
his seminal work was not published in a journal until 2004 [45]. In Section |2] we already 
presented a basic operational semantics for our processes as a starting point for the defini- 
tion of all the semantics in the spectrum: a small-step semantics that collects the (atomic) 
actions executed by the processes into the corresponding transition system. By contrast, all 
the operational semantics in this section will be big-step semantics which directly return the 
adequate semantic values defining each of the semantics. They are generated by means of 
SOS-like rules that obtain these values in a compositional way. An extensive presentation 
of structural operational semantics covering all its variants can be found in (39] . 



9.1. Local simulations up-to. In order to characterize all the reasonable behavior preorders 
in a coinductive way we need to generalize constrained N-simulations (Definition l2.2|) with 
N-simulations up-to an order E. 

Definition 9.1. Let E be a behavior preorder and N a relation over processes. We say that 
a binary relation S over processes is an N -simulation up-to E if S c N and S is a simulation 
up-to E. Or equivalently, in a coinductive way, whenever we have pSq we also have: 

• for every a, if p — > p' a then there exist a' , q' a such that q "2 q' — > q' a and p' a Sq' a ; 

• pNq. 

We say that process p is N-simulated up-to C by process q, or that process q N-simulates 
process p up-to E, written p C q r if there exists an N-simulation up-to E, S, such that pSq. 
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We often just write £ , instead of E t when the behavior preorder is clear from the 
context. 

We proved in |23| that all the preorders defining the semantics in the ltbt spectrum can 
be characterized as N-simulations up-to the corresponding equivalence relation =, where N 
is the constraint defining the coarsest simulation semantics finer than the given semantics. 
For instance, the result for the semantics between failures semantics and ready simulation 
was the following. 

Theorem 9.2 ( p3| ). For every behavior preorder E satisfying the axiom (RS) and QCl,we have 
p C Cj if and only ifp C q. 

Table[6]shows the constraints defining the adequate constrained simulation order finer 
than each of the semantics in the linear time-branching time spectrum. Obviously, they 
coincide with the layer of the extended spectrum at which each semantics appear. 
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Table 6: Constraints for the semantics in the ltbt spectrum. 



Note that Theorem 19.21 is more subtle that it could appear: it characterizes a given 
preorder with a constrained simulation upto the preorder itself (Definition 19 .II) . There- 
fore, there are several semantics that share the same constraint. This characterization is 
indeed rather technical and the key point is that it allows to express any behavior preorder 
in a simulation-like fashion. We have used this characterization to prove many useful 
statements in our previous worlC] and we will use it again several times in the current 
Section. 

In our proof of the completeness of the axiomatizations for the linear semantics in the 
spectrum in Section [5] we used a notion of normal form which, roughly, was defined by 
applying repeatedly to any term p the axiom (ND=) from right to left, for as long as possible. 
Propositions l5.2l and l5.3l were then the key results to complete the proof, and also lie behind 
the intuition for introducing now the notion of local I-simulation up-to. 

Definition 9.3. For Z e [F, R, FT, RT} and p = £ 8 £j ap l a , whenever we have a pair of indices 
i, j and a decomposition p' a = r a + s[ with Mz{p{, r a , s ] a ) we say that p is 1-locally Z-equivalent 
to q = p + a(p l a + r a ), and we write p =1 q. We say that p and q are locally Z-equivalent when 
they are related by the reflexive and transitive closure of =1, and then we write p =' q. 

For Z € [F, R, FT, RT} we refer to the /-simulations up-to =~ as local I-simulations up-to 
=z- We say that process p is locally /-simulated up-to =z by process q, or that process q 
locally /-simulates process p up-to =z, written p c =/ q, if there exists a local /-simulation 
up-to =z, S, such that pSq. 



For instance in |24| (Theorem 10) we provided an axiomatization for any behavior preorder starting from 
the equations of the corresponding equivalence. 
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„ r , V — >i A a — >t B 

Figure 16: Rules that compute the set of initial actions of a process. 

Local /-simulations up-to are enough to characterize the linear semantics in {F, R, FT, RT}. 
Note that we cannot get a local notion of bisimulation up-to equivalent to our unrestricted 
notion of bisimulation up-to. 

Proposition 9.4. For Z e {F, R, FT, RT} we have p^z q if and only ifp c =i q. 

~~z 

Proof. The implication from right to left is an immediate consequence of Theorem 19.21 
For the other, note that {(p,q) \ p Ez q} is a local /-simulation up-to =z- Indeed, for any 
V ~~~^ Pa we have q =L hnf z (q) and taking hnf z (q) - X, a T,i a K there exists some ;' such that 
hnf z (q)^hiandpiQ z hl D 

Example 9.5. Let us consider the processes p = dbc + abd and q — a(bc + bd). We have p =p q 

and we can check that p E =! q since p E RS q. In order to prove that we also have q C =! p, 

~= F ' _ F 

we apply =L to p to obtain p =L p + q and then we obtain q E RS p. 

By contrast, if we wanted to apply our bisimulation up-to characterization to prove 
directly that p =f q then we would have to turn q into q +p in order to simulate the transition 
p — > be. This would correspond to the local application of (ND=) combined with that of 
(RS=) I(x) = l(y) => a(x + y) - a(x + y) + ax. 

But if we replace the action a by a larger prefix a\. . .a„ then we should also modify the 
process q' = a\ . . . a n (bc + bd) in a non-local way in order to obtain q" - q' + p' , so that we 

could suitably simulate the transition p' = a\ . . . a n bc + a\ . . . a n bd — > a-i... a n bc. Certainly, 
this is not necessary when checking p' =p q' by means of local simulations up-to. 

The coinductive characterization of the semantics by means of simulations up-to has 
at least two important advantages over that of using bisimulations up-to. First, we can 
characterize the orders defining the semantics and not just the induced equivalences; and 
second, we can use a local variant of the up-to mechanism so that we only need to rely on 
the equivalence relation = l z for the up-to part. 

9.2. Operational rules for the linear semantics of processes. In Section [9Tl we have in- 
troduced and proved some results that establish the framework using which we achieve 
our goal: to define for each of the classic linear semantics an operational semantics over 
BCCSP terms in such a way that we can use constrained simulations to characterize the 
considered semantics. For instance, if we consider the case of the failures preorder Cp , we 
are going to define a new operational semantics for BCCSP terms (f, Act, =>f) such that 
p C F q if and only if q ready simulates p in CP,Act, =>f). 

Next we will concentrate first on the diamond of linear semantics coarser than ready 
simulation. All these semantics are based on the observation of the initial set of actions of 
each process, that can be obtained by application of the SOS-like rules in Figure H6l 
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*■ ' ap + a(q + r) + s < — >z ap + a(q + r) + a(p + q) + s 

(CL) P— Z K t^UL 

Figure 17: Operational semantics characterizing the linear semantics. 

The rules in Figure [17] define the transition relation =>z that induces the operational 
semantics to characterize each of the Z-semantics. The transition relation < — >z is an 
auxiliary relation that captures the iterated application of the axiom (ND=). Rules (RF) 
and (TR) define reflexivity and transitivity of the relation < — >z- Finally the rule (CL) 
combines the auxiliary relation < — >z arid the original operational transition relation — > 
(see Figure 12]), to define the new labeled transitions =>z- 

Definition 9.6. For Z 6 {F, R, FT, RT}, the operational semantics for BCCSP terms is given 
by the labeled transition system (f, Act, ==>z) 'where the transition relation =^>z is defined 
by the rules in Figure 1171 

By abuse of notation, we have written Mz(A p , A q , A r ) to express that we check Mz(p, q, r) 
using the initials computed by — >j. 

The relation =>z has some interesting properties. First, it is an extension of the original 
transition system. 

Proposition 9.7. For Z e {F, R, FT, RT}, p and q BCCSP processes, and a a sequence of actions in 
Act, we have that p => q implies p =>z <]■ 

Although usually some new transitions appear, the set of initial actions of any process 
always remains the same. 

Corollary 9.8. For Z 6 {F, R, FT, RT] and for any BCCSP process p, we have V (p) - I^ z (p). 

It is also clear that, for any Z e {F, R, FT, RT}, the auxiliary relation < — >z preserves the 
equivalence =z because the rule (ND) corresponds to the application of axiom (TND=), 
which is sound with respect to =L. 

Proposition 9.9. For Z e [F, R, FT, RT} and any two BCCSP processes p and q, we have p < — >z q 
implies p =z q- 

Now we prove the main theorem in this section, that asserts that for each of the seman- 
tics in the considered diamond we can define the corresponding operational semantics as 
stated in Figure [171 

Theorem 9.10. For Z e {F, R, FT, RT} and any two BCCSP processes p and q, we have 

pQzq ^^ p qf s z q. 

Proof. We will apply our characterization of the orders E z by means of local /-simulations 
up-to at Proposition 19.41 to show that p E^ s z q implies p c =/ q. This is because any ready 
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simulation over the transition system =>z is also a local /-simulation up-to =z- Indeed, 
if R is a ready simulation over the transition system =>z, and pRq, then whenever we 

have p — > p' we also have p =>z p' , arid therefore there is some q =>z q' with p'Rq'. By 
definition of the transition system =>z, there is some process q" such that q < — >z ^?" and 
q" — > g'. Then we also have 17 = z q" , and thus R is indeed a local /-simulation up-to =z- 
To prove that p c =/ ^ implies p C R< f ^, we will check that the relation c =( is a ready 

~= z Ki> ~= z 

simulation over the transition relation =>z- If P £=/ <7/ whenever p =>z p' we have some 

~ = z 

process p" such that p < — >z p" and p" — > p'. Then we also have p =z p"/ and so p" C =I (7. 

~ = z 
From p" — > p' we now obtain that there are processes q' and q" such that q = z q" , q" — > q' , 
and therefore we also have q < — >z q" , thus concluding the proof. □ 

As a consequence of our negative results at the end of Section |9Tl it is not possible to 
obtain an operational semantics locally defined from that which characterizes the linear 
semantics by means of bisimilarity. However, this can be done if we use mutual similarity 
instead of bisimulation. 

Certainly, the fact that the characterizations in terms of bisimilarity cannot be defined 
in a local way is related to the fact that the transition systems generated by application 
of the algorithm in [17] are larger than those generated by our local transformation here. 
Unfortunately, it is true that our presentation does not magically lead (at least at the 
theoretical level) to more efficient algorithms to decide the equivalences with respect to 
the linear semantics (which are known to be quite hard to decide). Obviously, this is 
related to the fact that simulation is harder than bisimulation [37J. Even so, these are just 
theoretical worst case bounds, and it is nice to know that in practice we can apply a local 
transformation to generate the transition systems characterizing those semantics by means 
of the simulation orders, that in many concrete cases will not be too difficult to decide. 

9.3. Characterizing the semantics corresponding to other constraints. Let us start by 
considering the case of the universal constraint U. As discussed in Section [3^21 if we use U 
in the condition Mz it is clear that all the semantics in the corresponding diamond collapse 
into a single one: trace semantics. It is immediate to realize that the transition system to 
characterize it in terms of plain simulations is the same transition system ==>f that we use 
to characterize the failures semantics by means of ready simulations. 

Theorem 9.11. The trace preorder E T coincides with the simulation order on the transition system 
=>f, that is, p^T q iffp CT F <?■ 

Even if this coincidence is a simple fact that reflects the relation between traces and 
failures semantics, it contributes to clarify it. In plain words, failures semantics is just traces 
semantics enriched by the observation of initials, so that the plain simulation order that 
implies the trace order becomes the ready simulation order. 

For other, finer observers such as T we can also characterize the corresponding semantic 
orders, such as possible and impossible futures, in terms of local simulations up-to. We can 
use that result to justify that the corresponding transition systems ==>\ would characterize 
the semantic orders E| in terms of T-simulations that preserve the set of traces of the 
simulated process. In this case the corresponding operational characterization has to 
include rules for the computation of the set of traces T(p) and this cannot certainly be done 
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for infinite processes. But out of the computation of these sets, the rest of the rules for 
the generation of the corresponding transition systems =>£ are a ^ so valid, and their local 
character is still present. 

9.4. Application: trace deterministic normal forms. As a simple application we present 
the example used by Klin in [36], that we already used in [22] to illustrate our coinductive 
characterization of the behavior preorders by means of our bisimulations up-to. 

Definition 9.12. For any process p - Y^ a T^\ a Pa the deterministic form of p is defined as 
Det(p) = Z e aDet(Z i pi). 

We wish to prove that p and Det(p) are trace equivalent. We will do it by proving that 
they are simulation equivalent over the transition system =>f- 

Proposition 9.13. For any process p we have p Ef Det(p). 

Proof. We will prove that p E^* f Det(p) by showing that R = {(p, Det(p + q)) \ p, q processes} 

is a simulation for the transition system =>f- For q - T, a H,j ac l ! a w e have Det(p + q) = 

Z a ^ ei (LiP a + JLj a i)- Then, for any p =»f p' we have p - p a + ZkA' f° r some index 
i and p\ - r\ + s k a a decomposition of any of the rest of the summands of p. We have 
Det(p + q)^ Det(Zi ap\ + Lj a qi) = D ^((P'a + Lk A) + (Zk A + Lj <&))> so that we also have 
Det(p + q) ^ F Det((pi + L k r\) + (L k A + Lj i)\ with (p< + Z k A, Det((pi + Zk A) + (L k A + 
Ljql)))eR. D 

Proposition 9.14. For any process p we have Det(p) c F p. 

Proof. We will prove that Det(p) E^ f p by showing that R - {(Det(p),p)} is a simulation for 
the transition system =>f- Since Det(p) is deterministic for each a e Act there is a unique 
transition Det(p) ==>p Det(ZiPa)- By applying the definition of =>f we have p =>f T^iPa* 
and clearly we have {Det(^i p l a ), L; Pa) £ R- □ 

Although this is a very simple example, it is interesting to compare the proof above with 
that in [22 J. This proof is simpler and more natural, mainly because the proof obligations to 
check bisimulations forced us to remove the sub-terms that were not in the chosen transition 
when we had to simulate it. This is not necessary for any of the two simulations that are 
needed to check mutual simulation, as done above. Obviously, this is also related to the 
impossibility to obtain a notion of local bisimulation up-to characterizing the equivalence 
under any of the linear semantics. 

10. Conclusions and some future work 

Throughout this paper we have provided a global outline of process semantics from differ- 
ent points of view, each of which reveals some of the key ingredients for a more uniform 
comprehension of those semantics. We have noted that the family consisting of the simu- 
lation semantics — constrained simulations, in its generalized version — plays an essential 
role in the class of process semantics, becoming the cornerstone for sorting and classifying 
the remaining semantics. 

From a framework in which, based on observational trees, denotational semantics are 
assigned — Section 0] — we have been able to prove that the spectrum of process semantics 
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can be structured by means of layers that are induced by the simulations. Each layer 
is dominated by a simulation semantics that determines the finest distinction available 
for that layer. The remaining semantic families are also described by abstracting or sim- 
plifying the observations needed for the corresponding layer. In particular, below each 
constrained simulation there appear the corresponding versions for each of the classic 
linear semantics — failures, readiness, failure trace, and ready trace — and, as we saw in 
Section[8l other semantics are also explained within our framework. 

This observational characterization allowed us to offer a new insight into the axiomatic 
characterization of the semantics — Sections |3] and |5] — revealing a uniformity lacking in all 
previous studies. To characterize any of the orders that define a process semantics, we 
have proved that it is enough to use two parametric axioms: one of the required axioms 
is that for the generalized simulation of the corresponding layer while the other, when 
it is present, has to do with the reduction of non-determinism that is carried out in each 
semantics. 

Analogously, in Sections[6]and[Z]we showed how to characterize process semantics by 
means of sets of Hennesy-Milner logic formulas out of their observational characterization, 
and finally we have also discussed a unified operational presentation of the semantics in 
the extended spectrum. 

One of the more obvious lines for future work would be to consider those semantics that 
allow for an inner, non- visible action, known as weak semantics. Actually, some promising 
results have already been obtained that make clear the regularity and generality present 
in the domain of weak semantics. In particular, in [ 16] it is proved that it is possible to 
apply to weak semantics the algorithm to obtain axiomatic characterizations of semantic 
equivalences from the axioms for corresponding order |2T| . And H2H3J provides a detailed 
study of the axiomatization of weak simulation semantics. 

Let us also cite here the recent work by Anti Valmari [53 1, where he presents the 
full catalogue of (weak) linear- time congruences for finite state systems. Certainly, it is 
interesting to limit somehow the class of "reasonable" semantics for processes, but this 
has not been so much the intention of our work in this paper. In fact, it is interesting to 
note that the results in the paper referenced above limit the set of semantics to explore in 
a quite personal way: for instance, the semantics of failure traces and that of ready traces 
are not included in the category, because Valmari (implicitly) considers that they are not 
"linear-time enough". 

Another interesting approach consists in the use of coalgebras — following the work, 
among others, of Jesse Hughes and Bart Jacobs [35] — where powerful categorical techniques 
allow to connect the idea of simulation with that of bisimulation, which is central in the 
coalgebraic setting. More concretely, these techniques were successfully used in |26fl to 
relate classic and probabilistic bisimulation. 
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